[....] Starting enhanced syslogd: rsyslogd[ 13.284975] audit: type=1400 audit(1519637071.075:4): avc: denied { syslog } for pid=3648 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.197' (ECDSA) to the list of known hosts. 2018/02/26 09:24:42 fuzzer started 2018/02/26 09:24:42 dialing manager at 10.128.0.26:41707 syzkaller login: [ 26.180062] random: crng init done 2018/02/26 09:24:46 kcov=true, comps=false 2018/02/26 09:24:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000700)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0xa}, 0x400}, 0x1c) 2018/02/26 09:24:47 executing program 7: r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000d44000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000ad8000)=[], 0x0, &(0x7f00008c5ff0)=[{0xc, 0x29, 0x3e}], 0xc}, 0x0) 2018/02/26 09:24:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000cd6000)={@mcast1={0xff, 0x1, [], 0x1}}, 0x77) 2018/02/26 09:24:47 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000040e000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002500)}) ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000000)) 2018/02/26 09:24:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000026d000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f000013efec)={@local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x14) 2018/02/26 09:24:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000eeb000)='1', 0x1}], 0x1) 2018/02/26 09:24:47 executing program 1: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00001b3000), 0x948) 2018/02/26 09:24:47 executing program 2: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d56ffc)=0x10005, 0x4) sendmsg(r0, &(0x7f0000f03fc8)={&(0x7f0000759fe4)=ANY=[@ANYBLOB="0a004e20000000000000000000000000000000000000f6ffffff0000b0d9ea8249df68b5e3dd2ea1c858d8bcd85086cb022741af839eb3a31704000000a13a93078914c5ed59527e"], 0x1, &(0x7f0000d8e000)=[], 0x0, &(0x7f000056cda0)=[]}, 0x0) [ 29.848986] audit: type=1400 audit(1519637087.635:5): avc: denied { sys_admin } for pid=3864 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.884456] IPVS: Creating netns size=2536 id=1 [ 29.909943] audit: type=1400 audit(1519637087.695:6): avc: denied { net_admin } for pid=3866 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.934743] IPVS: Creating netns size=2536 id=2 [ 29.965123] IPVS: Creating netns size=2536 id=3 [ 29.982290] IPVS: Creating netns size=2536 id=4 [ 30.028809] IPVS: Creating netns size=2536 id=5 [ 30.081248] IPVS: Creating netns size=2536 id=6 [ 30.148592] IPVS: Creating netns size=2536 id=7 [ 30.212333] IPVS: Creating netns size=2536 id=8 [ 32.362116] audit: type=1400 audit(1519637090.155:7): avc: denied { sys_chroot } for pid=3868 comm="syz-executor4" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.662583] audit: type=1400 audit(1519637090.455:8): avc: denied { dac_override } for pid=5186 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:24:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000700)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0xa}, 0x400}, 0x1c) 2018/02/26 09:24:50 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000010fe8)=@known='system.posix_acl_access\x00') 2018/02/26 09:24:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000820fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000593000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "6d9c07afbe3c"}}) 2018/02/26 09:24:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000058000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x5382, &(0x7f000003bffe)) 2018/02/26 09:24:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f000016d000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/26 09:24:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents(r0, &(0x7f000051f000)=""/24, 0x18) 2018/02/26 09:24:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=ANY=[@ANYBLOB="0a004e210000000000000000000000000000800000000001000000cc"], 0x1, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}], 0x1, 0x0) 2018/02/26 09:24:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000003fe0)) 2018/02/26 09:24:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ashmem\x00', 0x0, 0x0) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000001fe1)=""/31, 0x1f}], 0x1) 2018/02/26 09:24:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f81000)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000483000)=[{r0}], 0x1, &(0x7f0000003000)={0x77359400}, &(0x7f0000302ff8), 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0x5100, &(0x7f000000b000)={0x0, &(0x7f0000000000)=[]}) 2018/02/26 09:24:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000700)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0xa}, 0x400}, 0x1c) 2018/02/26 09:24:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f000016d000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/26 09:24:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4020940d, &(0x7f0000000000)={@common='ipddp0\x00'}) 2018/02/26 09:24:50 executing program 5: mkdir(&(0x7f000002a000)='./file0\x00', 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000026000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000029fd4)=""/48, 0x30) 2018/02/26 09:24:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000820fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000593000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "6d9c07afbe3c"}}) 2018/02/26 09:24:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$int_in(r1, 0x5452, &(0x7f0000fb7000)=0x5) 2018/02/26 09:24:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000014fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) getrusage(0x0, &(0x7f0000004fb8)) sendmsg(r0, &(0x7f0000000000)={0x0, 0x278, &(0x7f0000004fe0)=[], 0x36a, &(0x7f0000006000)=[]}, 0x8000) 2018/02/26 09:24:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000820fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000593000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "6d9c07afbe3c"}}) [ 32.791585] audit: type=1400 audit(1519637090.575:9): avc: denied { fsetid } for pid=5215 comm="syz-executor7" capability=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:24:50 executing program 1: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[]}) readlink(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)=""/4096, 0x1000) membarrier(0x1, 0x0) 2018/02/26 09:24:50 executing program 5: mkdir(&(0x7f000002a000)='./file0\x00', 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000026000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000029fd4)=""/48, 0x30) 2018/02/26 09:24:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000700)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0xffffffffffffffff, 0xa}, 0x400}, 0x1c) 2018/02/26 09:24:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000820fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000593000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "6d9c07afbe3c"}}) 2018/02/26 09:24:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f000016d000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/26 09:24:50 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00008dfff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0x0, 0x20008000, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f000000d000)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x0}}, 0x10) writev(r0, &(0x7f00002f7ff8)=[{&(0x7f0000bddfcc)="b3", 0x1}], 0x1) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) 2018/02/26 09:24:50 executing program 3: r0 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000009ff0)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000009000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000007000)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10) 2018/02/26 09:24:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f81000)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000483000)=[{r0}], 0x1, &(0x7f0000003000)={0x77359400}, &(0x7f0000302ff8), 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0x5100, &(0x7f000000b000)={0x0, &(0x7f0000000000)=[]}) 2018/02/26 09:24:50 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000288ffc)=0x2, 0x4) sendto$inet6(r0, &(0x7f00006d5000), 0x0, 0x0, &(0x7f00009e5000)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:50 executing program 5: mkdir(&(0x7f000002a000)='./file0\x00', 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000026000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000029fd4)=""/48, 0x30) 2018/02/26 09:24:50 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f000016d000)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) 2018/02/26 09:24:50 executing program 7: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xc) 2018/02/26 09:24:50 executing program 0: clock_nanosleep(0xa291564de2dfa604, 0x0, &(0x7f000066a000)={0x0, 0x1c9c380}, &(0x7f0000491ff8)) 2018/02/26 09:24:50 executing program 1: clone(0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0") 2018/02/26 09:24:50 executing program 7: mkdir(&(0x7f000091a000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000849feb)=@known='com.apple.FinderInfo\x00', &(0x7f00008c3fff)='\x00', 0x1, 0x0) 2018/02/26 09:24:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000efafb0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) 2018/02/26 09:24:50 executing program 6: prctl$seccomp(0x21, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[]}) 2018/02/26 09:24:50 executing program 1: clone(0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0") 2018/02/26 09:24:50 executing program 5: mkdir(&(0x7f000002a000)='./file0\x00', 0x0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000026000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000029fd4)=""/48, 0x30) 2018/02/26 09:24:50 executing program 6: timer_create(0x7, &(0x7f0000b9d000)={0x0, 0x0, 0x1, @thr={&(0x7f0000531f6b), &(0x7f00000d3f6f)}}, &(0x7f0000d56ffc)) timer_settime(0x0, 0x0, &(0x7f000028fff0)={{0x77359400}, {0x77359400}}, 0x0) [ 32.893595] audit: type=1400 audit(1519637090.675:10): avc: denied { net_raw } for pid=5268 comm="syz-executor3" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 32.923959] device syz3 entered promiscuous mode 2018/02/26 09:24:50 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="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", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:24:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f000058cfff), 0x0, 0x20020006, &(0x7f00005b4000)={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) 2018/02/26 09:24:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), 0x4) 2018/02/26 09:24:50 executing program 1: clone(0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0") 2018/02/26 09:24:50 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000007ffc)={0x0, 0x0, 0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007ffc), 0x4) 2018/02/26 09:24:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f81000)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000483000)=[{r0}], 0x1, &(0x7f0000003000)={0x77359400}, &(0x7f0000302ff8), 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0x5100, &(0x7f000000b000)={0x0, &(0x7f0000000000)=[]}) 2018/02/26 09:24:50 executing program 7: mkdir(&(0x7f0000c0d000)='./control\x00', 0x0) r0 = open(&(0x7f000071fff6)='./control\x00', 0x0, 0x0) mknod(&(0x7f000085d000)='./control/file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 2018/02/26 09:24:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:24:50 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="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", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) [ 32.991762] device syz3 left promiscuous mode 2018/02/26 09:24:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), 0x4) 2018/02/26 09:24:51 executing program 5: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x800100000) 2018/02/26 09:24:51 executing program 1: clone(0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0") 2018/02/26 09:24:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="3003aea780fbcc78d2da94cbec5c378b480651b17f469f2555aad3ec51873e578f5ab3f6bf74188b011e265e225cd7f0119b082769ef525aed53732324aab48958856dad055ebb0f4a099af4a10bcb138f32ac410e14c3c9964dd8a6cfde808824607973c004e3429e3911e9c87f67543d97d150e960b895a55f45f65cfcc9647c13b1b8e78ef37375146e49570d0e0ba0263a523833931f6f1f40aff84e19225e7e3e44282b3a2c5711f31f1ac1ce03e8474a2bfe89da46e865301049010f0019ccdef177fbfe1dfb700b9be65470e77ce2c71009a1123046b2d977706282fd7e19e14511cd6bed8eb2722fde57504beafd9067f0d76addc432343ee639ccbbff542292b40155d254dda717e090a0e0cb1d2a5c05761b599189b195f9615269787500b8dd2359bd70ae6499091e2035bfd2b372b6b08bbd397b1d0525e91c51cd803e8798e6d3e82274b533505f74b6e0903a400050c10e31c996c1cc09c787503b03afce37aa23ceeaabc3b5", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:24:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000f81000)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000483000)=[{r0}], 0x1, &(0x7f0000003000)={0x77359400}, &(0x7f0000302ff8), 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0x5100, &(0x7f000000b000)={0x0, &(0x7f0000000000)=[]}) 2018/02/26 09:24:51 executing program 6: unshare(0x400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000e82000), 0x8) signalfd4(r0, &(0x7f0000c17ff8), 0x8, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = timerfd_create(0x0, 0x800) clock_gettime(0x0, &(0x7f0000378000)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, r1+10000000}}, &(0x7f000000dfe0)) read(r0, &(0x7f0000204f3b)=""/197, 0xc5) 2018/02/26 09:24:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), 0x4) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="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", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:24:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000), 0x4) 2018/02/26 09:24:51 executing program 5: r0 = socket(0x10, 0x1002000000000802, 0x2) connect$netlink(r0, &(0x7f0000000ff4)=@kern={0x10, 0x0, 0x0, 0x42}, 0xc) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNDETACHFILTER(r0, 0x400454d0, 0x0) 2018/02/26 09:24:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000662000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x18}, 0x0, 0x0, []}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00008a2fdc)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) 2018/02/26 09:24:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$DRM_IOCTL_VERSION(r1, 0xc0246400, &(0x7f0000001380)={0x4, 0x40, 0x0, 0x1000, &(0x7f00000002c0)=""/4096, 0x13, &(0x7f00000012c0)=""/19, 0x49, &(0x7f0000001300)=""/73}) sendfile(r0, r0, &(0x7f0000000040), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNDETACHFILTER(r0, 0x400454d0, 0x0) 2018/02/26 09:24:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000082eff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000def000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000c6bfe0)={0x0, 0x0, 0x4000000080000d8}) fcntl$lock(r0, 0x7, &(0x7f0000003fe0)) 2018/02/26 09:24:51 executing program 5: unlink(&(0x7f0000001ff8)='./file0\x00') getrlimit(0x0, &(0x7f0000001ff8)) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNDETACHFILTER(r0, 0x400454d0, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f0000635ff4)={0x10}, 0xc, &(0x7f0000f8eff0)={&(0x7f0000f8cf68)=ANY=[@ANYBLOB="300000001800030000000000000000000a00000000000007000000001400090008000000", @ANYBLOB="08b2c337d773fb70"], 0x2}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/4096) write$sndseq(r2, &(0x7f0000040000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/4096) write$sndseq(r2, &(0x7f0000040000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNDETACHFILTER(r0, 0x400454d0, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/4096) write$sndseq(r2, &(0x7f0000040000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/4096) write$sndseq(r2, &(0x7f0000040000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/4096) write$sndseq(r2, &(0x7f0000040000)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @addr}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000080)=""/4096) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x9, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0x200000000009}) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 2018/02/26 09:24:51 executing program 5: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 2018/02/26 09:24:51 executing program 1: unshare(0x28060400) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000c23000)=[{{&(0x7f0000a39000)=@in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000f87000)=[], 0x0, &(0x7f0000db5000)=[]}}], 0x1, 0x0) 2018/02/26 09:24:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00004ee000), 0x0) 2018/02/26 09:24:51 executing program 4: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f00007fbffd)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') 2018/02/26 09:24:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00006d3fc8)={&(0x7f00001e4ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x13, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 7: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/02/26 09:24:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write(r0, &(0x7f0000eaffa7)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13cecb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697ae707d4a70f330e6fe3a1c9c76f314ffab329", 0x58) write$tun(r0, &(0x7f0000027000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x48, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @loopback=0x7f000001, {[]}}, @udp={0x3, 0x2, 0x34, 0x0, "673e45e78f452b086d3bc833dceb0159d31d10f41ffa127055c0f8024ca1c593839bd4c176f0f031e7a6a00a"}}}, 0x52) 2018/02/26 09:24:51 executing program 5: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f000000120000000100000ff6ff0100000000000000000000000222ff10", 0x24) 2018/02/26 09:24:51 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a09ff1)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)={0x20000005}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000557ff4)) epoll_wait(r0, &(0x7f00003de000)=[{}], 0x1, 0x0) 2018/02/26 09:24:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 4: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f00007fbffd)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') 2018/02/26 09:24:51 executing program 6: pipe2(&(0x7f00009dcff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$getflags(r1, 0x408) dup2(r0, r2) 2018/02/26 09:24:51 executing program 4: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f00007fbffd)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') 2018/02/26 09:24:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 5: setrlimit(0x7, &(0x7f000000f000)) inotify_init() [ 33.762157] audit: type=1400 audit(1519637091.545:11): avc: denied { create } for pid=5468 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:24:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000f10ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) write(r2, &(0x7f000027ef10), 0x0) 2018/02/26 09:24:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f000069d000)='/dev/loop#\x00', 0x0, 0x800) ioctl(r0, 0x400000000000127b, &(0x7f00000e5fbd)) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f20db064635c1388e6030240f8013aa40d832e80ce6c1e15ac54b4379c6f3e552f73eb5d0ef8c6e273dafd1d2e5008be6433fe65c9190650ec48d657a209716", "976491b85e1a434329176e446b4e6431b49695a6b69863e1f67ba8fa296b898d"}) 2018/02/26 09:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/02/26 09:24:51 executing program 7: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/02/26 09:24:51 executing program 5: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)={0x102c, 0x7fff}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f000047f000)=0x1ff, 0x4) 2018/02/26 09:24:51 executing program 4: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f00007fbffd)='H', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001000)='./file0\x00') 2018/02/26 09:24:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x20) close(r1) 2018/02/26 09:24:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) dup2(r0, r1) 2018/02/26 09:24:51 executing program 3: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f00002e7fec)="020000002000000000feff00010000808c000000", 0x14, 0x0) 2018/02/26 09:24:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0xffffff67) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x20) close(r1) 2018/02/26 09:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/02/26 09:24:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003c3ff8)='./file0\x00', &(0x7f0000863ff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x10010, &(0x7f0000000000)) preadv(r0, &(0x7f000074d000)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000beaff8)=[{&(0x7f0000d3d000)="580000001400192300a14b0000daad560a0600000023e076000543d818fe0000000000007136643e88ea07002804000000000000000200fffd000000001ce4ed5e6e0000000022000c00010006e808000000ec6b0f530006", 0x58}], 0x1) 2018/02/26 09:24:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000001fd8)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9f488ed80ef65b8290f74161eb37614b594661bbe38b8351290262ebc4d01a19"}}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000001000)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f20db064635c1388e6030240f8013aa40d832e80ce6c1e15ac54b4379c6f3e552f73eb5d0ef8c6e273dafd1d2e5008be6433fe65c9190650ec48d657a209716", "976491b85e1a434329176e446b4e6431b49695a6b69863e1f67ba8fa296b898d"}) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x20) close(r1) 2018/02/26 09:24:51 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) dup2(r0, r1) [ 33.937942] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/02/26 09:24:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f000081cff5)='/dev/hwrng\x00', 0x801, 0x0) 2018/02/26 09:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f20db064635c1388e6030240f8013aa40d832e80ce6c1e15ac54b4379c6f3e552f73eb5d0ef8c6e273dafd1d2e5008be6433fe65c9190650ec48d657a209716", "976491b85e1a434329176e446b4e6431b49695a6b69863e1f67ba8fa296b898d"}) 2018/02/26 09:24:51 executing program 7: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000beaff8)=[{&(0x7f0000d3d000)="580000001400192300a14b0000daad560a0600000023e076000543d818fe0000000000007136643e88ea07002804000000000000000200fffd000000001ce4ed5e6e0000000022000c00010006e808000000ec6b0f530006", 0x58}], 0x1) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x20) close(r1) 2018/02/26 09:24:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000e3dffc)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000d11000), &(0x7f0000d11000)=0x4) 2018/02/26 09:24:51 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) dup2(r0, r1) 2018/02/26 09:24:51 executing program 2: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf03f}]}) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) dup2(r0, r1) 2018/02/26 09:24:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000beaff8)=[{&(0x7f0000d3d000)="580000001400192300a14b0000daad560a0600000023e076000543d818fe0000000000007136643e88ea07002804000000000000000200fffd000000001ce4ed5e6e0000000022000c00010006e808000000ec6b0f530006", 0x58}], 0x1) 2018/02/26 09:24:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x11, &(0x7f0000faf000), 0x3c8) 2018/02/26 09:24:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f000081cff5)='/dev/hwrng\x00', 0x801, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000beaff8)=[{&(0x7f0000d3d000)="580000001400192300a14b0000daad560a0600000023e076000543d818fe0000000000007136643e88ea07002804000000000000000200fffd000000001ce4ed5e6e0000000022000c00010006e808000000ec6b0f530006", 0x58}], 0x1) 2018/02/26 09:24:51 executing program 0: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)=@ipv4_newroute={0x28, 0x18, 0xc09, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, [{}]}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 2: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sched_setparam(0x0, &(0x7f0000ab4000)) 2018/02/26 09:24:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f000081cff5)='/dev/hwrng\x00', 0x801, 0x0) 2018/02/26 09:24:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00008ebff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000ff1000)={{0x1}}) 2018/02/26 09:24:51 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f20db064635c1388e6030240f8013aa40d832e80ce6c1e15ac54b4379c6f3e552f73eb5d0ef8c6e273dafd1d2e5008be6433fe65c9190650ec48d657a209716", "976491b85e1a434329176e446b4e6431b49695a6b69863e1f67ba8fa296b898d"}) 2018/02/26 09:24:51 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:24:51 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800000000401, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)='&', 0x1) 2018/02/26 09:24:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/02/26 09:24:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f000081cff5)='/dev/hwrng\x00', 0x801, 0x0) 2018/02/26 09:24:51 executing program 7: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2018/02/26 09:24:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f00000000c0)="4d637cb729582aab596ef8fc8b0e65879233c874f5d6ad13bdbb948aafc552df277de4f4f4da3ccdb11d437ccb01075261e508456a15448f11583cde6cd870beacca313b400a133a531e9ab584a887de814bf01f867230aa467502d201e66fa6f1e4c6d84d02ef966f80bad2c8ff1f08dfb9d85a50ba1c6eceb9d08ea9b9", 0x7e) 2018/02/26 09:24:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@rand_addr}, 0x0, @in6=@empty}}, 0x222) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00006bafc8)={0x0, 0x0, &(0x7f00009f6000)={&(0x7f000045b000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40000000000) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) 2018/02/26 09:24:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000002c80)={&(0x7f0000002cc0)=@newlink={0x24, 0x10, 0x221, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_AF_SPEC={0x4, 0x1a, []}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001ff5)='/dev/loop#\x00', 0x7d, 0x900) ioctl(r0, 0x4400000000001264, &(0x7f0000005fff)) 2018/02/26 09:24:52 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000247ffc), 0x4) 2018/02/26 09:24:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000c90000)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:24:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) close(r0) 2018/02/26 09:24:52 executing program 1: prctl$seccomp(0x21, 0x1, &(0x7f0000000ff9)={0x0, &(0x7f000050d000)=[]}) prctl$void(0x22) 2018/02/26 09:24:52 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x21}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:24:52 executing program 1: r0 = open(&(0x7f000005a000)='./file0\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0x40305828, &(0x7f00005b9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2018/02/26 09:24:52 executing program 1: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f000003c000), 0x400) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000004000)='./file0\x00') listxattr(&(0x7f0000301000)='./file0\x00', &(0x7f000055df8f), 0x0) 2018/02/26 09:24:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x0, 0x300, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shutdown(r0, 0x1) 2018/02/26 09:24:52 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@common='gre0\x00', @ifru_ivalue=0x9}) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 2018/02/26 09:24:52 executing program 2: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001000)="da", 0x1) 2018/02/26 09:24:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0xff}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x3, 0x4) 2018/02/26 09:24:52 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x21}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:24:52 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00006f1fff)='/', r0, &(0x7f0000f73000)='./file1\x00', 0x0) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x1, @empty}, 0x1c) 2018/02/26 09:24:52 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000004000)='\x00\x00\x00\afles\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:24:52 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@common='gre0\x00', @ifru_ivalue=0x9}) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 2018/02/26 09:24:52 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000013000)) 2018/02/26 09:24:52 executing program 1: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f000003c000), 0x400) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000004000)='./file0\x00') listxattr(&(0x7f0000301000)='./file0\x00', &(0x7f000055df8f), 0x0) 2018/02/26 09:24:52 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x21}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:24:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x1, @empty}, 0x10, &(0x7f0000f1dfc0)=[], 0x0, &(0x7f00006f1a36)=[{0x10, 0x0, 0x7}], 0x10}, 0x810) 2018/02/26 09:24:52 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00006f1fff)='/', r0, &(0x7f0000f73000)='./file1\x00', 0x0) 2018/02/26 09:24:52 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000004000)='\x00\x00\x00\afles\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:24:52 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x21}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/02/26 09:24:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x1, @empty}, 0x1c) [ 34.504073] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. 2018/02/26 09:24:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f000098dffa)) 2018/02/26 09:24:52 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@common='gre0\x00', @ifru_ivalue=0x9}) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) [ 34.582172] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. [ 34.622466] device gre0 entered promiscuous mode 2018/02/26 09:24:52 executing program 1: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f000003c000), 0x400) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000004000)='./file0\x00') listxattr(&(0x7f0000301000)='./file0\x00', &(0x7f000055df8f), 0x0) 2018/02/26 09:24:52 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000004000)='\x00\x00\x00\afles\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x1, @empty}, 0x1c) 2018/02/26 09:24:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000c24000)={{0x50f}, 0x1}) 2018/02/26 09:24:52 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00006f1fff)='/', r0, &(0x7f0000f73000)='./file1\x00', 0x0) 2018/02/26 09:24:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) 2018/02/26 09:24:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@common='gre0\x00', @ifru_ivalue=0x9}) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r1, r0) 2018/02/26 09:24:52 executing program 4: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00006f1fff)='/', r0, &(0x7f0000f73000)='./file1\x00', 0x0) 2018/02/26 09:24:52 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000004000)='\x00\x00\x00\afles\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:24:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000c24000)={{0x50f}, 0x1}) 2018/02/26 09:24:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000c24000)={{0x50f}, 0x1}) 2018/02/26 09:24:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @empty}}, 0x1, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x110) 2018/02/26 09:24:52 executing program 1: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f000003c000), 0x400) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000004000)='./file0\x00') listxattr(&(0x7f0000301000)='./file0\x00', &(0x7f000055df8f), 0x0) 2018/02/26 09:24:52 executing program 5: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) unshare(0x40600) pwrite64(r0, &(0x7f0000682000), 0x0, 0x0) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00004fe000)=0x101, 0x4) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0xfffffd65, 0x20000004, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x1, @empty}, 0x1c) 2018/02/26 09:24:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000c24000)={{0x50f}, 0x1}) [ 34.754553] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. [ 34.785445] device gre0 entered promiscuous mode 2018/02/26 09:24:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xfffffffffffffe9e, 0x0, 0x0, 0x3426c6ef012208ef) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001340)=@ax25, 0x10, &(0x7f0000001840)=[{&(0x7f0000001380)=""/67, 0x43}], 0x1}}], 0x1, 0x0, 0x0) 2018/02/26 09:24:52 executing program 5: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[], 0x0, 0x0, &(0x7f00000001c0), 0x8) 2018/02/26 09:24:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x13, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_address={0x5, 0x8, 0x2, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x98}, 0x1}, 0x0) 2018/02/26 09:24:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000f53000)=""/150, &(0x7f0000a4d000)=0x96) [ 34.834575] TCP: request_sock_TCPv6: Possible SYN flooding on port 20010. Sending cookies. Check SNMP counters. [ 34.939712] device gre0 entered promiscuous mode 2018/02/26 09:24:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x400) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f00007bdff0)={&(0x7f0000c13000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:24:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001000), 0x209) 2018/02/26 09:24:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xfffffffffffffe9e, 0x0, 0x0, 0x3426c6ef012208ef) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001340)=@ax25, 0x10, &(0x7f0000001840)=[{&(0x7f0000001380)=""/67, 0x43}], 0x1}}], 0x1, 0x0, 0x0) 2018/02/26 09:24:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00006f3ffd)='ns\x00') getdents64(r0, &(0x7f0000436000)=""/172, 0xac) getdents(r0, &(0x7f000055f000)=""/4096, 0x1000) 2018/02/26 09:24:52 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000009ffc)=0x101, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000fe4)={0xa, 0xffffffffffffffff, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x400) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000d7efec)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:52 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f00007bdff0)={&(0x7f0000c13000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) [ 35.056308] device gre0 entered promiscuous mode 2018/02/26 09:24:52 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x400) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) unshare(0x400) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xfffffffffffffe9e, 0x0, 0x0, 0x3426c6ef012208ef) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001340)=@ax25, 0x10, &(0x7f0000001840)=[{&(0x7f0000001380)=""/67, 0x43}], 0x1}}], 0x1, 0x0, 0x0) 2018/02/26 09:24:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x3, 0xff5d) [ 35.101847] audit: type=1400 audit(1519637092.895:12): avc: denied { create } for pid=5892 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 35.180929] device gre0 entered promiscuous mode 2018/02/26 09:24:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000589000)={0x0, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:53 executing program 7: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000008ff0)={0x0, 0x1, 0x24b, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) 2018/02/26 09:24:53 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00002b9000)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f000064dfeb)="ff55d36cffba04365d0000000000000101000000", 0x14) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000000e000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:24:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bbc000)=[], &(0x7f000000b000)=[]}}}], 0x0, 0x0, &(0x7f0000442000)}) 2018/02/26 09:24:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xfffffffffffffe9e, 0x0, 0x0, 0x3426c6ef012208ef) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001340)=@ax25, 0x10, &(0x7f0000001840)=[{&(0x7f0000001380)=""/67, 0x43}], 0x1}}], 0x1, 0x0, 0x0) 2018/02/26 09:24:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/26 09:24:53 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f00007bdff0)={&(0x7f0000c13000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/26 09:24:53 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000ff3000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000c91fc8)={&(0x7f00008a6ff4)={0x10}, 0xc, &(0x7f00007bdff0)={&(0x7f0000c13000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 4: rt_sigsuspend(&(0x7f00000f6000), 0xffffffffffffffce) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x200000000000000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) [ 35.309627] audit: type=1400 audit(1519637093.095:13): avc: denied { set_context_mgr } for pid=5910 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 2018/02/26 09:24:53 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0x0, 0x20008000, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000d9c000)=[{&(0x7f00005e8000)="d1", 0x1}], 0x1) 2018/02/26 09:24:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001000)={0x0, 0x0, &(0x7f00004f0000)=[], 0x0, 0x0, &(0x7f00004f0fd4)}) 2018/02/26 09:24:53 executing program 7: socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000054dff0)={0x2, &(0x7f0000011ff0)=[{0x28, 0x0, 0x0, 0xfffffffffffff000}, {0x6}]}, 0x10) write(r1, &(0x7f0000b0c000), 0x0) [ 35.316604] device gre0 entered promiscuous mode [ 35.362189] audit: type=1400 audit(1519637093.155:14): avc: denied { call } for pid=5910 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 35.385241] binder_alloc: 5910: binder_alloc_buf, no vma [ 35.391545] binder: 5910:5921 got reply transaction with no transaction stack 2018/02/26 09:24:53 executing program 6: r0 = syz_open_dev$tun(&(0x7f00006c1000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c8fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000e2afb0)={@generic="30609402080000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) [ 35.391554] binder: 5910:5921 transaction failed 29201/-71, size 0-0 line 2920 [ 35.411751] binder: 5910:5928 transaction failed 29189/-3, size 0-0 line 3127 [ 35.415130] binder_alloc: binder_alloc_mmap_handler: 5910 20000000-20002000 already mapped failed -16 [ 35.415161] binder: BINDER_SET_CONTEXT_MGR already set [ 35.415167] binder: 5910:5945 ioctl 40046207 0 returned -16 [ 35.416315] binder: 5910:5921 unknown command 76 [ 35.416322] binder: 5910:5921 ioctl c0306201 2000a000 returned -22 [ 35.416343] binder: 5910:5945 got reply transaction with no transaction stack [ 35.416349] binder: 5910:5945 transaction failed 29201/-71, size 0-0 line 2920 [ 35.482908] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.488553] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.494182] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000058eff1)='ns/uts\x00') setns(r0, 0x0) 2018/02/26 09:24:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00009dcff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) sendto$inet(r0, &(0x7f0000de2fff), 0x0, 0x20000815, &(0x7f0000a57000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000b37000)=[{&(0x7f0000e1af28)=""/216, 0xd8}], 0x1) shutdown(r0, 0x1) 2018/02/26 09:24:53 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 2018/02/26 09:24:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/26 09:24:53 executing program 6: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000cc4fa4), &(0x7f000096fffc), &(0x7f0000689000), &(0x7f00006d9f22)) 2018/02/26 09:24:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000e8c000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00003cc000)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, []}}) 2018/02/26 09:24:53 executing program 2: mmap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x0, 0x6132, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000062000/0x3000)=nil) munmap(&(0x7f0000062000/0x1000)=nil, 0x1000) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000062000)='/dev/input/event#\x00', 0x0, 0x0) 2018/02/26 09:24:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f000097d000)=0x2, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) writev(r0, &(0x7f0000d9c000)=[{&(0x7f00005e8000)="d1", 0x1}], 0x1) 2018/02/26 09:24:53 executing program 6: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000f8000)) 2018/02/26 09:24:53 executing program 3: r0 = socket$inet(0x10, 0x2, 0xa) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000c21f67)="240000000104f50000000000000006000a200af80900010003e800600700000000ab001f", 0x24}], 0x1}, 0x0) [ 35.704234] audit: type=1400 audit(1519637093.495:15): avc: denied { create } for pid=5972 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 2018/02/26 09:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000058eff1)='ns/uts\x00') setns(r0, 0x0) 2018/02/26 09:24:53 executing program 6: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x84, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000ffc), 0x0) 2018/02/26 09:24:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00009dcff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) sendto$inet(r0, &(0x7f0000de2fff), 0x0, 0x20000815, &(0x7f0000a57000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000b37000)=[{&(0x7f0000e1af28)=""/216, 0xd8}], 0x1) shutdown(r0, 0x1) 2018/02/26 09:24:53 executing program 0: mkdir(&(0x7f000066cff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/02/26 09:24:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f00000013c0)={@common='sit0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000faefec)={0x0, @common='irlan0\x00'}}}) 2018/02/26 09:24:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000ff0)=[{&(0x7f000000c000)=""/226, 0xe2}], 0x1, &(0x7f0000000000)=[{&(0x7f000000af1f)=""/225, 0xe1}], 0x1, 0x0) 2018/02/26 09:24:53 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00007f8ff3)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x5302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f00000001c0)=@pi={0x0, 0x15, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @loopback=0x7f000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x20) 2018/02/26 09:24:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 4: prctl$intptr(0x1c, 0x6) prctl$intptr(0x1c, 0x5) [ 35.912443] device eql entered promiscuous mode 2018/02/26 09:24:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000001fffc)=0x8000002, 0x4) bind$unix(r0, &(0x7f00001d3000)=@abs={0x1}, 0x8) sendto$unix(r0, &(0x7f0000b12000), 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:53 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)=[]}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380)=[], 0x0, &(0x7f0000000600)=[]}}], 0x2, 0x0) 2018/02/26 09:24:53 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x70}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000001ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001261, &(0x7f0000005fdf)) 2018/02/26 09:24:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000058eff1)='ns/uts\x00') setns(r0, 0x0) 2018/02/26 09:24:53 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00007f8ff3)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x5302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f00000001c0)=@pi={0x0, 0x15, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @loopback=0x7f000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x20) 2018/02/26 09:24:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00009dcff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) sendto$inet(r0, &(0x7f0000de2fff), 0x0, 0x20000815, &(0x7f0000a57000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000b37000)=[{&(0x7f0000e1af28)=""/216, 0xd8}], 0x1) shutdown(r0, 0x1) 2018/02/26 09:24:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)={0x14, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r0) 2018/02/26 09:24:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000665fe0)={"dbc78fc0a6caa717004720a0a32b5f0d", {0x4, 0x0, 0x0, "e0b618b5a2e0"}}) clone(0x0, &(0x7f0000592ffe), &(0x7f0000bb3000), &(0x7f0000362000), &(0x7f000046e000)) modify_ldt$read_default(0x2, &(0x7f0000735000)=""/1, 0x1) 2018/02/26 09:24:53 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20}, 0x47) 2018/02/26 09:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000058eff1)='ns/uts\x00') setns(r0, 0x0) 2018/02/26 09:24:53 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) 2018/02/26 09:24:53 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00009dcff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) sendto$inet(r0, &(0x7f0000de2fff), 0x0, 0x20000815, &(0x7f0000a57000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000b37000)=[{&(0x7f0000e1af28)=""/216, 0xd8}], 0x1) shutdown(r0, 0x1) 2018/02/26 09:24:53 executing program 4: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="02000000040000000004008000e9bc22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6400) dup3(r1, r0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)) [ 36.026592] device eql entered promiscuous mode 2018/02/26 09:24:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) 2018/02/26 09:24:53 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x70}, 0x1}, 0x0) 2018/02/26 09:24:53 executing program 0: r0 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000006ff8)={0x0, 0x0, 0xb58}, &(0x7f0000000000)=0xcb) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019fe8)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x0, "c430f635e0d63fcd350ce4a42b256d778394745cbe2eaf52e83ff817c19097166ed6bf94e21f5eb84fc450ce9997d256eb8e581541bfc8f569354f99e08df74c4da0bd4a1af3b84acb45951489610f729031a35a05d37196201f02e8fb4bbcc7c2819878ded00e2155a33cfc53e42b508aab518525eca4fc9396aa04730d"}, 0x55) 2018/02/26 09:24:53 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) 2018/02/26 09:24:53 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00007f8ff3)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x5302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f00000001c0)=@pi={0x0, 0x15, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @loopback=0x7f000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x20) 2018/02/26 09:24:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000bf2000)) 2018/02/26 09:24:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket(0x11, 0xa, 0x8000000000000300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000232000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f00000f3000)="002600043e02001452f400849e06", 0xe, 0x0, &(0x7f0000e72000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x0, "c430f635e0d63fcd350ce4a42b256d778394745cbe2eaf52e83ff817c19097166ed6bf94e21f5eb84fc450ce9997d256eb8e581541bfc8f569354f99e08df74c4da0bd4a1af3b84acb45951489610f729031a35a05d37196201f02e8fb4bbcc7c2819878ded00e2155a33cfc53e42b508aab518525eca4fc9396aa04730d"}, 0x55) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x0, "c430f635e0d63fcd350ce4a42b256d778394745cbe2eaf52e83ff817c19097166ed6bf94e21f5eb84fc450ce9997d256eb8e581541bfc8f569354f99e08df74c4da0bd4a1af3b84acb45951489610f729031a35a05d37196201f02e8fb4bbcc7c2819878ded00e2155a33cfc53e42b508aab518525eca4fc9396aa04730d"}, 0x55) 2018/02/26 09:24:53 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) 2018/02/26 09:24:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x0, "c430f635e0d63fcd350ce4a42b256d778394745cbe2eaf52e83ff817c19097166ed6bf94e21f5eb84fc450ce9997d256eb8e581541bfc8f569354f99e08df74c4da0bd4a1af3b84acb45951489610f729031a35a05d37196201f02e8fb4bbcc7c2819878ded00e2155a33cfc53e42b508aab518525eca4fc9396aa04730d"}, 0x55) 2018/02/26 09:24:53 executing program 2: mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) ppoll(&(0x7f00004fc000)=[{r0}], 0x1, &(0x7f000087fff0)={0x77359400}, &(0x7f0000fafff8), 0x8) open(&(0x7f000055f000)='./file0\x00', 0x2822, 0x0) 2018/02/26 09:24:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) 2018/02/26 09:24:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000bf2000)) 2018/02/26 09:24:54 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x70}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) [ 36.176775] device eql entered promiscuous mode 2018/02/26 09:24:54 executing program 0: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) prctl$intptr(0x18, 0x0) 2018/02/26 09:24:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000bf2000)) 2018/02/26 09:24:54 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000b99fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000011000/0x3000)=nil, 0x3000) mremap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000be4000/0x4000)=nil) close(r0) 2018/02/26 09:24:54 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}]}, 0x70}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00007f8ff3)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_flags=0x5302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f00000001c0)=@pi={0x0, 0x15, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast2=0xe0000002, @loopback=0x7f000001, {[]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x8}}}, 0x20) 2018/02/26 09:24:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000bf2000)) [ 36.240495] device gre0 entered promiscuous mode 2018/02/26 09:24:54 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) [ 36.340889] device eql entered promiscuous mode 2018/02/26 09:24:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) 2018/02/26 09:24:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) 2018/02/26 09:24:54 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00002aafe6)={@generic="ef92afe47a7e42bb51aeb82759145a21", @ifru_map={0x80000001}}) 2018/02/26 09:24:54 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r1, 0xc1a6}], 0x1, 0xfffffffffffffffe) dup2(r1, r0) 2018/02/26 09:24:54 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f00008c9000)=[], 0x0, 0x0, &(0x7f000089aff8)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/02/26 09:24:54 executing program 7: getpriority(0x2, 0x0) 2018/02/26 09:24:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={{{{0x2, 0xffffffffffffffff, @broadcast=0xffffffff}}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}}}, 0x0, 0x0, 0x0, "d858834181332e435893f760968f541b42c41db0f53229e10458031e411acc918b07deaa85a7158cb72317b9229c05a260f51652df313aabeba60958f75aa48ae177e2e4fe748f1a5499840c1abde9e6"}, 0x160) 2018/02/26 09:24:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000fecffc)=0x4, 0x47) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x2a, &(0x7f0000e5e000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001, {[]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000e76000)={0x0, 0x1}) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000cf1ff0)=@nfc, 0x10, &(0x7f0000aa9fb0)=[{&(0x7f0000351000)=""/179, 0xb3}], 0x1, &(0x7f00000da000)=""/4096, 0x1000}, 0x0) 2018/02/26 09:24:54 executing program 7: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000f62ffc), 0x4) 2018/02/26 09:24:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}) 2018/02/26 09:24:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000001ff4)={@multicast2=0xe0000002, @multicast1=0xe0000001, @empty}, 0xc) 2018/02/26 09:24:54 executing program 7: keyctl$chown(0x4, 0x0, 0x0, 0x0) 2018/02/26 09:24:54 executing program 7: keyctl$chown(0x4, 0x0, 0x0, 0x0) 2018/02/26 09:24:54 executing program 7: keyctl$chown(0x4, 0x0, 0x0, 0x0) [ 36.449476] device gre0 entered promiscuous mode 2018/02/26 09:24:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a00fd4bc49feaa4d6c139ecb66a712f0f01001f030718000000091317140400", 0x24) 2018/02/26 09:24:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:54 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f00008c9000)=[], 0x0, 0x0, &(0x7f000089aff8)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/02/26 09:24:54 executing program 7: keyctl$chown(0x4, 0x0, 0x0, 0x0) 2018/02/26 09:24:54 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000009ffc)=0x0) r1 = syz_open_procfs(r0, &(0x7f000011dff9)='ns\x00') exit(0x0) getdents(r1, &(0x7f000013b000)=""/181, 0xb5) 2018/02/26 09:24:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000acd000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) 2018/02/26 09:24:54 executing program 2: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00002aafe6)={@generic="ef92afe47a7e42bb51aeb82759145a21", @ifru_map={0x80000001}}) [ 36.608236] device gre0 entered promiscuous mode 2018/02/26 09:24:54 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00002aafe6)={@generic="ef92afe47a7e42bb51aeb82759145a21", @ifru_map={0x80000001}}) 2018/02/26 09:24:54 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 2: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000acd000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) 2018/02/26 09:24:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f00008b8ff6)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r1) fdatasync(0xffffffffffffffff) 2018/02/26 09:24:54 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f00008c9000)=[], 0x0, 0x0, &(0x7f000089aff8)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/02/26 09:24:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000481000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_mtu=0xef3a}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000970ff0)=@common='gre0\x00', 0x10) sendto$inet(r0, &(0x7f00009e9000), 0x0, 0x20000040, &(0x7f0000d17000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:24:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000e4bf8b)='net/tcp6\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/02/26 09:24:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000e4bf8b)='net/tcp6\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/02/26 09:24:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000e4bf8b)='net/tcp6\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/02/26 09:24:54 executing program 2: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000e4bf8b)='net/tcp6\x00') readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) 2018/02/26 09:24:54 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f00008c9000)=[], 0x0, 0x0, &(0x7f000089aff8)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/02/26 09:24:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000acd000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) 2018/02/26 09:24:54 executing program 4: prctl$setmm(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000fc5000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @in6=@empty, 0x0, 0x10}]}, 0x38}, 0x1}, 0x0) [ 36.796731] device gre0 entered promiscuous mode 2018/02/26 09:24:54 executing program 7: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="a197a283d2aa7dbd6dbe4dffcf74", 0xe}], 0x1, &(0x7f0000000280)=[]}}, {{&(0x7f00000019c0)=@ax25={0x3, {"7a399215e7f9b8"}}, 0x10, &(0x7f0000001f00)=[], 0x0, &(0x7f0000001f80)=[]}}], 0x2, 0x0) 2018/02/26 09:24:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f6b000)='net/route\x00') readv(r0, &(0x7f000038a000)=[{&(0x7f00000fb000)=""/150, 0x96}, {&(0x7f0000a4ef32)=""/206, 0xce}, {&(0x7f00005f2f6c)=""/148, 0x94}, {&(0x7f0000c65000)=""/57, 0x39}], 0x4) 2018/02/26 09:24:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000acd000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) 2018/02/26 09:24:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f00008b8ff6)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r1) fdatasync(0xffffffffffffffff) 2018/02/26 09:24:54 executing program 2: getrandom(&(0x7f0000000000)=""/148, 0x94, 0x0) 2018/02/26 09:24:54 executing program 6: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000872000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00002aafe6)={@generic="ef92afe47a7e42bb51aeb82759145a21", @ifru_map={0x80000001}}) 2018/02/26 09:24:54 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) connect$inet6(r0, &(0x7f00003bb000)={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00006d5000), 0x0, 0x0, &(0x7f00009e5000)={0xa, 0x2, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) 2018/02/26 09:24:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r0, 0x402, 0x0) pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000001140)={&(0x7f0000000040)={0x98, 0x1, 0x4, 0x200, 0x4, 0x3, {0x7, 0x0, 0x5}, [@generic="c6784436fed7a028d205c63fd9a12de5cd6b8e06b393ff3c88f45b45e155960907ae450f22369399243590514681a3f4bed4791fb63ffb9333fc02157b051f871278c1766068fddd6da9735efd1989226df35984d7d44ab2025e2e151003a44889af19a8f81e24", @nested={0x4, 0x67, [@generic]}, @typed={0x18, 0x15, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000011c0)={0x1354, 0x4, 0xa, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@generic, @typed={0x18, 0x56, @str='\'vmnet1\\wlan0\x00'}, @typed={0x1008, 0x1e, @binary="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"}, @nested={0xcc, 0x31, [@generic="beaa8aacb9a08336888b23281b41d5c13b5d372d267e5e303ce54577bbb893a6aa1fdf87821d4f976e6536c53e216d9378cd7ef2dbba9898f07c094bb4f2697357b39a4288325913cc4a2d39dcc67d68f9e8b3bbe5fb97212086216b02fb61324bd3656e570e7cc6535d39050e77f79df16e7c6e4988b9feef8ee711062caf95de6394fb0388abe79c943242c37258c6563750ae9030fcf357c833f19a0a6cf04668d6637e388eb6dd309816579e3eb1643e37d67d19cea1019c38a9237685955cd2845678fa"]}, @typed={0xc, 0x65, @u32=0x7}, @typed={0xc, 0x79, @str='\x00'}, @nested={0xc0, 0x5c, [@generic="0042ef7764476f9f6752ea2c3a799d0f85e6dcb6b209ea62831de1742b278623dd892c885417d1721444b8490b2d9c4dc599bede80fbb5d476b9649e53910849a149fe1c0e71a0d943ca5145adae6f49b2cc282c8b9e6dc5d12f7583", @typed={0x60, 0x5f, @binary="201362582e6ee7e0ccdcfb22d794ab058a3afa3f5daeb52fd0cc0b7ac92557d6bba511491c27fa25d334635573d821163142c8a94f0f785f22b332ae12701f7f4e56cf2436f5445d3a4877c3f1d7c20acde6dbf15d1d325f"}]}, @nested={0x17c, 0x8e, [@generic="8d8ed0e334beaae47c388e169826489c471f5462ee4cd64ca114b540c595d61200d3375f9c434c868f821ef3eb3b2b05ad2c06cb8278664aeef900fbc46bbd454035a1b3cecbcbb4c6b426f996ee0c3a85cca4398f7b777df87b7fc9a0512e07214a9650a35e1d9ef6e216522d20f965748ce59ca02404f7c3c2a878d59e135d9a0e5e966159139cb1ab2e6cf17de5453ca784a4c03641ada4464a0a1176a489dcd9ccedbbeb05118fa7a304c2fffecc93099a8081fc254eb9906499b193e771c2d1bb124436c548c67cc530aa0ff27d4b4168ac1933b297", @generic="3e7d02b131c7f15b8c5b6bbf7410b6f9ffbaf836e7b626192688b397a113057321c137c936cc734506192c3ea805ed1f67ccdf084d0bf9a18692d3337dfe5342873e8c85cd9ddfdfc8d1c2f3489f559042d2a31ccbae253a5ba9c3d191fd1446ddc0cfeb4104d16f2d9e23561feea82f069ad73ad7e67e55b840c9bbdeeef5977dbc22456eccc2f7b474e2a7523f63f17d4038c275e701a8b25b6de5580a"]}]}, 0x1354}, 0x1}, 0x0) 2018/02/26 09:24:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000d09000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 2018/02/26 09:24:54 executing program 4: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:54 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="d7a5", 0x2, 0x0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x10, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)=[]}}], 0x1, 0x0) 2018/02/26 09:24:54 executing program 2: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) inotify_add_watch(r0, &(0x7f0000fc8000)='./control\x00', 0x2000000) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/02/26 09:24:54 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000902, 0x0) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f00000021c0)="af9988744aaf8c5f7c5bca72d95a6bad3fe502d8f2f73f60199aabf2e4bda131641b8f36a00d5b96ecb20660566f571a851dd77def74443627c12bd9050eaa238c1b8146f87f2b4186d094c4d147825d458cb9e49f072423692da42e81c1a8d986ced676687207612c485de8cb590a06c92ad1d2e74c0e427240e54d0300000000000000943010b682d005e502bf936ffdf45da9", 0x94, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xffc) [ 36.983283] audit: type=1400 audit(1519637094.775:16): avc: denied { write } for pid=6223 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/26 09:24:54 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00006f2000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x400000002000, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00005c8fe0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x10301}) 2018/02/26 09:24:54 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) fcntl$notify(r0, 0x0, 0x282) 2018/02/26 09:24:54 executing program 4: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:54 executing program 5: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:54 executing program 4: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:54 executing program 6: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000021000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f000095cff0)=[{0x28, 0x0, 0x0, 0xfffffdfffffff01c}, {0x6}]}, 0x10) [ 37.050618] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) [ 37.117105] device syz1 entered promiscuous mode [ 37.123458] device syz1 left promiscuous mode 2018/02/26 09:24:55 executing program 1: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), 0x4) 2018/02/26 09:24:55 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) 2018/02/26 09:24:55 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000427ff3)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000de5000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000cb8ff4)) 2018/02/26 09:24:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00005d2000)=@dstopts={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x7f9) 2018/02/26 09:24:55 executing program 4: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:55 executing program 0: timer_create(0x0, &(0x7f0000b3d000)={0x0, 0x3c, 0x0, @thr={&(0x7f000022f000), &(0x7f0000298000)}}, &(0x7f0000a7e000)) timer_settime(0x0, 0x0, &(0x7f0000052000)={{}, {0x7ff, 0x4}}, &(0x7f000019dfe0)) timer_settime(0x0, 0x0, &(0x7f000005bfe0), &(0x7f0000046000)) 2018/02/26 09:24:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f00008b8ff6)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r1) fdatasync(0xffffffffffffffff) 2018/02/26 09:24:55 executing program 7: r0 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}, {&(0x7f0000000040)="d10f697e02914d5cc119361a7f23493a7ddba09a22eaac0fd39ba52c9eb638d1600972", 0x23}, {&(0x7f0000001140)="e28e6fea4dde7675face05ea4c6e7d2214c40e5b68378a3d63bbb95cc9ac38a18f156b8bdbfbc0e5f42bd388e031d710c4d13eb90d9a1791461262dc6141b52edc62ada0098a7781f6942ed45695033aa5c56ac5d979a104777f95", 0x5b}, {&(0x7f0000002340)="00c62113ed80d41bd6df2a5465c01a3306a1a05d6606f5bed7e37663f81eae4c81854e9d1e59e68053d5467777f870fa47efa7cb40bf6208a77a53e4abbb9ad5bccd2d323fd20e88a9de256d6688988afe3f4565bd63d8fe7a4179b1d9faf347a5f75bdc9209d599ef86c7e6085e9d2781beaefffece2833f364c21b94f9a89020f9392b639f20aaa3763c82eff1923bdb269fa53a7bed67c83039dc281a7a6dd3605be5fc1956be545748588d", 0xad}], 0x4, 0x0) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$random(&(0x7f0000c44ff4)='/dev/random\x00', 0x0, 0x80002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x8000) 2018/02/26 09:24:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[{0xc}], 0xc}}], 0x2, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0xfffffffffffffe6c) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) shutdown(r0, 0x2) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001ffc), &(0x7f0000013000)=0x4) 2018/02/26 09:24:55 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000b9c000)) fstat(0xffffffffffffffff, &(0x7f0000638fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, 0x0, 0x0) [ 37.338717] mmap: syz-executor2 (6274) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/02/26 09:24:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000100)=[]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001fde), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000004000)=[], 0x1, 0x0, &(0x7f000000d000)='b'}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:24:55 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f000010e000)='net/ipv6_route\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e37ff4)={0x20000005}) poll(&(0x7f0000ceefd8)=[{r0}], 0x3e, 0x0) 2018/02/26 09:24:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000085bff8)=[{&(0x7f0000f1dfc7)="390000001100094700bb00e1b90500000700000002000000450000040000800019001a000d0000000000000000000000001d0004b300060400", 0x39}], 0x1) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='2/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='2/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f00000015c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x1, [], 0x1}}, @IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}]}, 0x40}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)) 2018/02/26 09:24:55 executing program 0: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000c1bfff)='/', r0, &(0x7f0000d06ff8)='./file0\x00') unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 2018/02/26 09:24:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) mkdirat(0xffffffffffffffff, &(0x7f00008b8ff6)='./file0\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r1) fdatasync(0xffffffffffffffff) 2018/02/26 09:24:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000801000)={0x2, &(0x7f00006b9fe8)=[{0x3}, {0x6}]}, 0x10) writev(r1, &(0x7f00000a6000)=[{&(0x7f000000e000)="8f", 0x1}], 0x1) [ 37.397865] audit: type=1400 audit(1519637095.185:17): avc: denied { setgid } for pid=6295 comm="syz-executor0" capability=6 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:24:55 executing program 6: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ca3000)) poll(&(0x7f0000144000)=[{r1}], 0x1, 0x0) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000054a000)=0xa, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000fa1ffe)=""/72, &(0x7f0000fa1ffc)=0x48) 2018/02/26 09:24:55 executing program 2: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000200)=""/22, 0x8}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/187, 0xbb}], 0x4, &(0x7f0000000440)=[{&(0x7f0000000400)=""/27}], 0x20000000000002d8, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/02/26 09:24:55 executing program 5: mkdir(&(0x7f0000ed6000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000045bff8)='./file0\x00', r0, &(0x7f00000cc000)='./file0\x00') linkat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000017000)='./file1\x00', 0x0) 2018/02/26 09:24:55 executing program 1: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x43, &(0x7f0000001fe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:24:55 executing program 2: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000200)=""/22, 0x8}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/187, 0xbb}], 0x4, &(0x7f0000000440)=[{&(0x7f0000000400)=""/27}], 0x20000000000002d8, 0x0) 2018/02/26 09:24:55 executing program 7: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00009ab000), &(0x7f0000cea000)) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000054a000)=0xa, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000fa1ffe)=""/72, &(0x7f0000fa1ffc)=0x48) 2018/02/26 09:24:55 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000009000)=0xffffffff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000de6ff0)={0x0, &(0x7f0000de6000)=[]}, 0x10) 2018/02/26 09:24:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000f75000)={&(0x7f0000001ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000299d58)={0x14, 0x10, 0x109, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 7: r0 = userfaultfd(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x200000}) 2018/02/26 09:24:55 executing program 2: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000200)=""/22, 0x8}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/187, 0xbb}], 0x4, &(0x7f0000000440)=[{&(0x7f0000000400)=""/27}], 0x20000000000002d8, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000088cfdd)="220000001800070700be0000090007000a00f6885100000900f8ff0005000280ff45", 0x22) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000002400030007fffd0000000000000005e10300000003000000fffffffffffff5fc", 0x24}], 0x1}, 0x0) 2018/02/26 09:24:55 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f000003a000)='./file0/bus\x00', 0x2, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x19, &(0x7f0000000000)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0xa, &(0x7f0000000080)=[], 0xffffefd, &(0x7f0000000040)=[]}}], 0x40001bd, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x19, &(0x7f0000000000)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0xa, &(0x7f0000000080)=[], 0xffffefd, &(0x7f0000000040)=[]}}], 0x40001bd, 0x0) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000054a000)=0xa, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000fa1ffe)=""/72, &(0x7f0000fa1ffc)=0x48) 2018/02/26 09:24:55 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f000003a000)='./file0/bus\x00', 0x2, 0x0) 2018/02/26 09:24:55 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@generic="6b0b9e000000071ea9367a030900", @ifru_settings={0x0, 0x4b, @te1=&(0x7f000000bff0)}}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000002000)) pread64(r0, &(0x7f000000d000)=""/4, 0x4, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000007ff8)=@sco, &(0x7f0000001ffc)=0x8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000001ffc)) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000002400030007fffd0000000000000005e10300000003000000fffffffffffff5fc", 0x24}], 0x1}, 0x0) [ 37.533513] audit: type=1400 audit(1519637095.325:18): avc: denied { write } for pid=6351 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:24:55 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000760000)=""/187, 0xbb}], 0x1, 0x0) 2018/02/26 09:24:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001dfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000015fd0)=@ipv6_newroute={0x24, 0x18, 0x501, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x19, &(0x7f0000000000)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0xa, &(0x7f0000000080)=[], 0xffffefd, &(0x7f0000000040)=[]}}], 0x40001bd, 0x0) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000054a000)=0xa, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000fa1ffe)=""/72, &(0x7f0000fa1ffc)=0x48) 2018/02/26 09:24:55 executing program 2: process_vm_readv(0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000200)=""/22, 0x8}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/187, 0xbb}], 0x4, &(0x7f0000000440)=[{&(0x7f0000000400)=""/27}], 0x20000000000002d8, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000002400030007fffd0000000000000005e10300000003000000fffffffffffff5fc", 0x24}], 0x1}, 0x0) 2018/02/26 09:24:55 executing program 4: futex(&(0x7f0000e68ffc), 0x9d6b559517e4f193, 0x0, &(0x7f00009002f5), &(0x7f0000b0c000), 0x0) 2018/02/26 09:24:55 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f000003a000)='./file0/bus\x00', 0x2, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x19, &(0x7f0000000000)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0xa, &(0x7f0000000080)=[], 0xffffefd, &(0x7f0000000040)=[]}}], 0x40001bd, 0x0) 2018/02/26 09:24:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000769ff7)='/dev/sg#\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f00003eeff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c8a02a5932fd69adc52c8e0345c26db185e9ed5355ea1469f94049d3f3fd", 0x21}], 0x1, &(0x7f0000b88000)=[]}], 0x1, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x80096b}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/02/26 09:24:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003c3ff8)='./file0\x00', &(0x7f0000863ff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f000074d000)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:24:55 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000698ff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000002000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f000040f000)) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000002400030007fffd0000000000000005e10300000003000000fffffffffffff5fc", 0x24}], 0x1}, 0x0) 2018/02/26 09:24:55 executing program 7: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x810, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000984000)=""/24, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) 2018/02/26 09:24:55 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000a20da4)={0x14, 0x7, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) connect(r0, &(0x7f0000008000)=@hci={0x1f}, 0x0) 2018/02/26 09:24:55 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f000003a000)='./file0/bus\x00', 0x2, 0x0) 2018/02/26 09:24:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003c3ff8)='./file0\x00', &(0x7f0000863ff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f000074d000)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000010ffc)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000011000), 0x0, 0x0, &(0x7f0000008000)={0xa, 0xffffffffffffffff, 0x3, @empty}, 0x1c) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) 2018/02/26 09:24:55 executing program 1: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000016ff4)) 2018/02/26 09:24:55 executing program 4: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000761ff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000fa1ff0)={&(0x7f0000002000)=""/64, 0x40}) 2018/02/26 09:24:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@dev={0xac, 0x14}}, 0x2, @in=@empty, 0xffffffffffffffff, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000cc2000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003c3ff8)='./file0\x00', &(0x7f0000863ff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f000074d000)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:24:55 executing program 7: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x810, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000984000)=""/24, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) 2018/02/26 09:24:55 executing program 6: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000005fc8)={0x0, 0x0, &(0x7f0000010fd0)=[], 0x0, &(0x7f0000002000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000005200910307fffd946fa200000200000000000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:55 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000a4b000)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001}}, @sadb_spirange={0x2, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[]}}], 0x2, 0x8080) 2018/02/26 09:24:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:24:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00003c3ff8)='./file0\x00', &(0x7f0000863ff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f000074d000)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:24:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80e, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000002ff8)) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f000000e000)=""/84, &(0x7f000000cffc)=0xffffffffffffffbc) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000903ff8)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000ffc000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:55 executing program 6: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="007c2a3276824b7e12d6cf60f62c7710231f2c0c0e047b417092538d36d8533d1ad9da478f0452b46a01725f5059942374665db603704f2e2a0000000000000000000000000000000000000000", 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/02/26 09:24:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00002b9fd4)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x0, []}, 0x10) [ 37.890164] device gre0 entered promiscuous mode 2018/02/26 09:24:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 7: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x810, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000984000)=""/24, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308}], 0x0, 0xfdfd, &(0x7f000000cf98)}) 2018/02/26 09:24:55 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "500e4156bafc36f82a4b504b036ac54c641b052b4bd37bbd64c835a43ff64c517d4be4bd09fd51dba95d4fe44d8faa82b23a5cc4658c9fedeef7256b40604ee4f878d9d3c3999e0312f06d8aedcd5039894a18126498dcc964dd5a402c417a1cc798189d285118d98e9f7ae8fc0ec9b74efbd90cd7d544765d2df18be50c1323476820af79bad0e65d1c48e0ca8685ab6e775d350961652c7a7c9f2918c9444a307a6b8fbc093f56829fa579723c6ecef716d5085439b3a070b638ce690c66144c8e0314250fa36a5a9113de159c9195db60cb56dc158ea825a7c56dcf9ab155f076e53afec5a4155269dd56fb99aaf6044ec72e8745f18929fd1bce7c52bfa1e099f237de1f32f43bd6ee103b9341a3eb484170637324bacee722c7625288463e69dc1cfb1162ece3f1b48eb95125e52cbf498aa2ae4f949a4f21bff523f3e29cb058647b17895e3901ba4d7750b0544537e77dc19f18b4d2ce1800e06596f84c4de7aaf4338810d040ed19ce89619e475824c0ecbce568fad0c59374a709ae626a706904f394a7874cbedb022d8397bbe406318dd5f5e81eb4fd15d7f49cbd4f9a871b56db62211dd7bb416e976aa57d7d5fd34f25e9f881dbab0466e9ec68c15b642b0057050564c6950b2ad79fcd5c81748252cf80f1403313664b1e54a333c90937f55c002e89304be9236ba919e36b677a2f4f7a495cc51bac62462d2c0f71328f7975f9ebb64f14094c1098343cc26e30e6a1e9b46b5df39a89ff2a44950e202bbddf866c8dbd834dee240dd2b10b3b0e0a47c8f1a810a8be5a71f7e68621fe0928ae2c23b2f3d01b01a94184217f467adee09c9e6a22ba53c634620162868da27af8974300231a1c6ba6b1fb145278327d6ff0edd905e52d0f1adbdfe92c152ebe3e988ec64ab512231e2abce8bf2ed6f6a4e1829fadb8ff3c51117b1094b8c9cb2cd807d88b3eeae3272d250868acebb332a5c6fe7717e782e9b3323d961b872568fe7798fbc4a81230a13b639a673c0044ce623355527a183efbe6367c30ee3d22b5de0e8913deedd0cac21a90fe13995a887baa295a64b367b6da934ffb23836fa6fce9023e8ee9d0152542e57a86c92d1569a1ef1e7d15b325e5c340d6933f890c43467f3b09371a9505a46064fc404c87ac13522b52e89f7afd49974539d3af5d1a5b8567a3570568fc344d4f854e1a385620cec24c6ec14a221d14b7259a11d5d7745933f6e608d74e49a4f7f1159eb2662a22ea7c6ef3ecf064f06e7443df5bd4de8e949e7e3500079e33b6b7dd0dd333dde809ab361601c66c4023aaee80021a8459fa2f4feca656b2f7117969e3e0abd5f18c1f507a207972ef12a11e3c437507ec91e571e487fa8a625608430bd0f9485d8e384f1cde04a6d4046c2f95ec56aff13155a79bd5b6cb"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x8, 0x27}, @IFLA_IFALIAS={0x14, 0x14, @common='bridge0\x00'}]}, 0x3c}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:24:55 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308}], 0x0, 0xfdfd, &(0x7f000000cf98)}) 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308}], 0x0, 0xfdfd, &(0x7f000000cf98)}) 2018/02/26 09:24:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) [ 38.057001] A link change request failed with some changes committed already. Interface syz6 may have been left with an inconsistent configuration, please check. [ 38.057503] binder: 6485:6495 BC_INCREFS_DONE node 5 has no pending increfs request 2018/02/26 09:24:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308}], 0x0, 0xfdfd, &(0x7f000000cf98)}) [ 38.057786] binder: BINDER_SET_CONTEXT_MGR already set [ 38.057792] binder: 6485:6495 ioctl 40046207 0 returned -16 [ 38.091430] binder: 6501:6506 BC_INCREFS_DONE node 6 has no pending increfs request [ 38.120602] binder: 6508:6512 BC_INCREFS_DONE node 7 has no pending increfs request 2018/02/26 09:24:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) [ 38.154624] binder: 6520:6521 BC_INCREFS_DONE node 8 has no pending increfs request [ 38.176996] A link change request failed with some changes committed already. Interface syz6 may have been left with an inconsistent configuration, please check. 2018/02/26 09:24:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) [ 38.206987] device gre0 entered promiscuous mode [ 38.260293] device gre0 entered promiscuous mode [ 38.265570] device gre0 entered promiscuous mode 2018/02/26 09:24:56 executing program 7: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x810, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000984000)=""/24, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) 2018/02/26 09:24:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000010ff4)={0x10, 0x0, 0xffffffffffffffff, 0x120202}, 0xc) getsockname(r0, &(0x7f000001c000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @loopback}}}, &(0x7f000001cffc)=0x3a) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f000001fffc)) 2018/02/26 09:24:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:56 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000792fd0)=@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x0, []}}, @enc_lim={0x4, 0x1}]}, 0x18) getsockopt$inet6_opts(r0, 0x29, 0x2000000036, &(0x7f0000000000)=""/121, &(0x7f0000000080)=0x10179) 2018/02/26 09:24:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00004b8ff7)='illinois\x00', 0x1017a) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) 2018/02/26 09:24:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0xffffffffffffffff, 0x0, @empty}, {0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000001080)={0x0, 0x2b, "3e0f3e3e254337d65c3c87d6755d19a1d3e65bb207208464d3624fadf853cd58562c850b7932f904df9cb6"}, &(0x7f0000000440)=0x33) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/02/26 09:24:56 executing program 2: mq_open(&(0x7f0000e62ffb)='..\x00', 0x0, 0x0, &(0x7f0000000000)) [ 38.549890] device gre0 entered promiscuous mode [ 38.556509] device gre0 entered promiscuous mode [ 38.582634] device gre0 entered promiscuous mode 2018/02/26 09:24:56 executing program 2: mq_open(&(0x7f0000e62ffb)='..\x00', 0x0, 0x0, &(0x7f0000000000)) 2018/02/26 09:24:56 executing program 5: r0 = socket(0x800000000000000a, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4ec, 0x2f8, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:iptables_unit_file_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast=0xffffffff, @dev={0xac, 0x14}}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x538) 2018/02/26 09:24:56 executing program 2: mq_open(&(0x7f0000e62ffb)='..\x00', 0x0, 0x0, &(0x7f0000000000)) [ 38.693002] device gre0 entered promiscuous mode 2018/02/26 09:24:56 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000800210002000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 09:24:56 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000927fd8)={@common='gre0\x00', @ifru_map={0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={@common='gre0\x00', @ifru_flags=0x21ff}) r2 = syz_open_dev$binder(&(0x7f000066aff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) read(r0, &(0x7f0000000140)=""/82, 0x52) 2018/02/26 09:24:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000000bff9)="666400000004bb") getdents(r0, &(0x7f000030cfe6)=""/26, 0x1a) 2018/02/26 09:24:56 executing program 2: mq_open(&(0x7f0000e62ffb)='..\x00', 0x0, 0x0, &(0x7f0000000000)) 2018/02/26 09:24:56 executing program 7: epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) inotify_init() pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:24:56 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 2018/02/26 09:24:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x2000000c, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) [ 38.916877] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. [ 38.918573] device gre0 entered promiscuous mode [ 38.929060] device gre0 entered promiscuous mode [ 38.974583] device gre0 entered promiscuous mode [ 38.979708] device gre0 entered promiscuous mode 2018/02/26 09:24:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000fc0000)={@common='sit0\x00', @ifru_data=&(0x7f0000fc0fe0)="5b6dad1e4bab4601dbff00000020000000000000dd7affffff00030a0b8436c8"}) 2018/02/26 09:24:56 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000032fef)='/dev/vga_arbiter\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:24:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00009aefff), &(0x7f00004eb000)=0xffffff58) 2018/02/26 09:24:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TCSETA(r0, 0x5402, &(0x7f00003e0000)={0x0, 0x0, 0x239}) write(r1, &(0x7f0000bb6ff9)="030d", 0x2) 2018/02/26 09:24:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000728000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f0000d0abe1)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b31d90", 0x0, "b99878"}, "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"}}}, 0x41f) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)=@alg, 0x58, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/21, 0x15}}, {{&(0x7f0000001240)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @broadcast}}}, 0x2e, &(0x7f0000001640)=[{&(0x7f0000001440)=""/28, 0x1c}], 0x2000000000000129}}], 0x800013d, 0x2, &(0x7f0000001700)={0x0, r2+30000000}) 2018/02/26 09:24:56 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000f90)=[], 0x0, &(0x7f0000003000)=[{&(0x7f0000003fff)=""/2, 0x2}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) 2018/02/26 09:24:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x533, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00004e4fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) recvmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000004000)=@ethernet={0x0, @empty}, 0x10, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000080)=""/29, 0x1d}}], 0x1, 0x2060, &(0x7f00000000c0)) 2018/02/26 09:24:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x1d}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000a82fa0)=[]}, 0x0) 2018/02/26 09:24:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) close(r0) 2018/02/26 09:24:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TCSETA(r0, 0x5402, &(0x7f00003e0000)={0x0, 0x0, 0x239}) write(r1, &(0x7f0000bb6ff9)="030d", 0x2) 2018/02/26 09:24:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TCSETA(r0, 0x5402, &(0x7f00003e0000)={0x0, 0x0, 0x239}) write(r1, &(0x7f0000bb6ff9)="030d", 0x2) [ 39.197798] device gre0 entered promiscuous mode [ 39.218961] device gre0 entered promiscuous mode 2018/02/26 09:24:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965)="d6", 0x1, 0x47ffc, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) flistxattr(r0, &(0x7f0000000000), 0x0) 2018/02/26 09:24:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000906ff3)="440dec03010400030007000000", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00003bc000)=""/141, &(0x7f000015affc)=0x8d) 2018/02/26 09:24:57 executing program 4: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x12, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a27ff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, &(0x7f0000b36fe4)=[], 0x1, 0x0, &(0x7f000025d000)) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TCSETA(r0, 0x5402, &(0x7f00003e0000)={0x0, 0x0, 0x239}) write(r1, &(0x7f0000bb6ff9)="030d", 0x2) 2018/02/26 09:24:57 executing program 6: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000468fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f0000f81000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000ee4000)=@ipv4_newaddr={0x28, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}, @IFA_ADDRESS={0x8, 0x1, @multicast1=0xe0000001}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000028c0)={0x0}, &(0x7f0000002900)=0xc) getpriority(0x0, r0) 2018/02/26 09:24:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965)="d6", 0x1, 0x47ffc, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 3: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 2018/02/26 09:24:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/26 09:24:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80}, @in=@dev={0xac, 0x14}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000048f18)={{{@in6=@dev={0xfe, 0x80}, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0xe8) 2018/02/26 09:24:57 executing program 4: mmap(&(0x7f0000000000/0xea2000)=nil, 0xea2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000fe8)) 2018/02/26 09:24:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965)="d6", 0x1, 0x47ffc, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=&(0x7f000008b000)={0x0, @syzn={0x73, 0x79, 0x7a}}}}) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='fdinfo\x00') execveat(r0, &(0x7f0000fbeff8)='./file0\x00', &(0x7f0000fbe000)=[], &(0x7f0000f35000)=[], 0x0) 2018/02/26 09:24:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000009fb4)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, &(0x7f0000009000)=[], &(0x7f0000009fb8)=[0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:24:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965)="d6", 0x1, 0x47ffc, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000376000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/26 09:24:57 executing program 3: r0 = epoll_create1(0x0) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r1 = open$dir(&(0x7f00004be000)='./file0\x00', 0x80000880, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004ffff4)) creat(&(0x7f00007dc000)='./file0\x00', 0x0) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@multicast1=0xe0000001, @multicast2=0xe0000002]}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000033000)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) [ 39.416678] binder: 6667:6674 got transaction with invalid data ptr [ 39.424525] binder: 6667:6674 transaction failed 29201/-14, size 72-0 line 3146 [ 39.452227] binder: BINDER_SET_CONTEXT_MGR already set [ 39.464288] binder: 6667:6686 ioctl 40046207 0 returned -16 [ 39.481440] binder_alloc: 6667: binder_alloc_buf, no vma [ 39.481460] binder: 6667:6691 transaction failed 29189/-3, size 72-0 line 3127 [ 39.497410] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.503229] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:24:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/26 09:24:57 executing program 1: r0 = epoll_create1(0x0) tee(r0, 0xffffffffffffffff, 0x7fffffff, 0x0) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000027fc8)={0x0, 0x0, &(0x7f0000000ff0)=[], 0x0, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000029000)=[{&(0x7f0000029dab)="6ea350fd947c8a6da22060cb9d46a1e84309f7e16f07002b99fe00000000000000016d2c41be0e2705763f49dc00f64cc441703679fb7113fe35c38393c9e30127c1e4bbd1", 0x45}], 0x1, &(0x7f0000029000)=[]}, 0x0) recvmsg(r0, &(0x7f000002c000)={&(0x7f000002c000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000028fc0)=[], 0x88, &(0x7f000002c000)=""/12, 0x9}, 0x0) 2018/02/26 09:24:57 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=&(0x7f000008b000)={0x0, @syzn={0x73, 0x79, 0x7a}}}}) 2018/02/26 09:24:57 executing program 2: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000003cff4)={0x0}, &(0x7f0000048000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000f9cff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r3, 0x8, r4) fcntl$getownex(r3, 0x10, &(0x7f000030f000)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000009fb4)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, &(0x7f0000009000)=[], &(0x7f0000009fb8)=[0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:24:57 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000376000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/26 09:24:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000a02, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xffffffffffffff81, 0x3}, {}, @control}], 0x1c) 2018/02/26 09:24:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c70ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000014a000)={@common='gre0\x00', @ifru_addrs=@sco={0x1f}}) readv(r1, &(0x7f0000292000)=[{&(0x7f00000b8f7b)=""/133, 0x85}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e34fe0)={@common='gre0\x00', @ifru_flags=0x301}) 2018/02/26 09:24:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000000c0882, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)='ub\\?', 0x4}], 0x1, 0x0) 2018/02/26 09:24:57 executing program 2: unshare(0x400) pipe(&(0x7f00005db000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00005d8000)=[{&(0x7f0000178000)}], 0x1, 0x0) 2018/02/26 09:24:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000009fb4)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, &(0x7f0000009000)=[], &(0x7f0000009fb8)=[0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000027fc8)={0x0, 0x0, &(0x7f0000000ff0)=[], 0x0, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000029000)=[{&(0x7f0000029dab)="6ea350fd947c8a6da22060cb9d46a1e84309f7e16f07002b99fe00000000000000016d2c41be0e2705763f49dc00f64cc441703679fb7113fe35c38393c9e30127c1e4bbd1", 0x45}], 0x1, &(0x7f0000029000)=[]}, 0x0) recvmsg(r0, &(0x7f000002c000)={&(0x7f000002c000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000028fc0)=[], 0x88, &(0x7f000002c000)=""/12, 0x9}, 0x0) 2018/02/26 09:24:57 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000376000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) [ 39.710023] binder: 6703:6706 got transaction with invalid data ptr [ 39.731542] binder: 6703:6706 transaction failed 29201/-14, size 72-0 line 3146 [ 39.748383] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.786036] binder: 6724:6729 got transaction with invalid data ptr [ 39.793168] binder: 6724:6729 transaction failed 29201/-14, size 72-0 line 3146 [ 39.807099] device gre0 entered promiscuous mode [ 39.826698] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:24:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000027fc8)={0x0, 0x0, &(0x7f0000000ff0)=[], 0x0, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000029000)=[{&(0x7f0000029dab)="6ea350fd947c8a6da22060cb9d46a1e84309f7e16f07002b99fe00000000000000016d2c41be0e2705763f49dc00f64cc441703679fb7113fe35c38393c9e30127c1e4bbd1", 0x45}], 0x1, &(0x7f0000029000)=[]}, 0x0) recvmsg(r0, &(0x7f000002c000)={&(0x7f000002c000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000028fc0)=[], 0x88, &(0x7f000002c000)=""/12, 0x9}, 0x0) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=&(0x7f000008b000)={0x0, @syzn={0x73, 0x79, 0x7a}}}}) 2018/02/26 09:24:57 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000376000)={0x77359400}, &(0x7f0000048000), 0x0) 2018/02/26 09:24:57 executing program 7: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000d7afa8)={0x0, 0x12, 0x0, @thr={&(0x7f0000572000), &(0x7f0000180000)}}, &(0x7f00002f5000)) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c70ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000014a000)={@common='gre0\x00', @ifru_addrs=@sco={0x1f}}) readv(r1, &(0x7f0000292000)=[{&(0x7f00000b8f7b)=""/133, 0x85}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e34fe0)={@common='gre0\x00', @ifru_flags=0x301}) 2018/02/26 09:24:57 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r0, &(0x7f0000335fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000027fc8)={0x0, 0x0, &(0x7f0000000ff0)=[], 0x0, &(0x7f0000005000)=[]}, 0xc100) sendmsg(r0, &(0x7f0000011000)={0x0, 0x0, &(0x7f0000029000)=[{&(0x7f0000029dab)="6ea350fd947c8a6da22060cb9d46a1e84309f7e16f07002b99fe00000000000000016d2c41be0e2705763f49dc00f64cc441703679fb7113fe35c38393c9e30127c1e4bbd1", 0x45}], 0x1, &(0x7f0000029000)=[]}, 0x0) recvmsg(r0, &(0x7f000002c000)={&(0x7f000002c000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000028fc0)=[], 0x88, &(0x7f000002c000)=""/12, 0x9}, 0x0) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f00004d4000)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00005a3000), 0x201) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00009d2000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/02/26 09:24:57 executing program 4: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f00000000c0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) symlink(&(0x7f0000747000)='./file0/control\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/02/26 09:24:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000259000)='/dev/sg#\x00', 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 2018/02/26 09:24:57 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f000019d000)={0x2, 0x3, @empty}, 0x58) sendto(r1, &(0x7f0000b19000)="e5", 0x1, 0x0, &(0x7f0000df3ffa)=@hci={0x1f}, 0xc) sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'ghash\x00'}}, []}, 0xe0}, 0x1}, 0x4008000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000ed9000)={@common='gre0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=&(0x7f000008b000)={0x0, @syzn={0x73, 0x79, 0x7a}}}}) 2018/02/26 09:24:57 executing program 4: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f00000000c0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) symlink(&(0x7f0000747000)='./file0/control\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') [ 40.057508] device gre0 entered promiscuous mode 2018/02/26 09:24:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/02/26 09:24:57 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000463ffa)='logon\x00', &(0x7f000097e000)={0x73, 0x79, 0x7a}, &(0x7f000014d000)='\x00', 0x0) 2018/02/26 09:24:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:57 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) 2018/02/26 09:24:57 executing program 3: socket$netlink(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000667fa0)={0x20000000, 0x8000000000013, 0x2, @tid}) 2018/02/26 09:24:57 executing program 4: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f00000000c0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) symlink(&(0x7f0000747000)='./file0/control\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/02/26 09:24:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c70ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000014a000)={@common='gre0\x00', @ifru_addrs=@sco={0x1f}}) readv(r1, &(0x7f0000292000)=[{&(0x7f00000b8f7b)=""/133, 0x85}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e34fe0)={@common='gre0\x00', @ifru_flags=0x301}) 2018/02/26 09:24:57 executing program 7: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00001b3000), 0x948) 2018/02/26 09:24:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000fd1fe0)={0x20, 0x0, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x12, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 4: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f00000000c0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) symlink(&(0x7f0000747000)='./file0/control\x00', &(0x7f0000ab9000)='./file0/control/file0\x00') rename(&(0x7f0000b2a000)='./file0/file0\x00', &(0x7f0000ab3ff0)='./file0/control\x00') 2018/02/26 09:24:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000dbb000)="440d0500ae17000000000002da", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000d10000), &(0x7f000011d000)) 2018/02/26 09:24:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0xd, 0x18, 0x0, 0x0, 0x59, "76cbd5f680433059c2b551abea6d36af507cea6489c34add75bcef1822ef862dab9094673d3270d0fb0e6c05dc68a1f1819ae9b0edde85c586dadc0c6678d0f8013d316eaf1ec51fa894fbff145df65233a0dc9bc66694bae4"}]}, 0x78}, 0x1}, 0x0) write$selinux_context(r1, &(0x7f0000d30000)='system_u:object_r:sound_device_t:s0\x00', 0x24) sendmsg$nl_route(r1, &(0x7f0000556000)={&(0x7f0000bb3000)={0x10}, 0xc, &(0x7f0000303ff8)={&(0x7f0000ec6000)=@ipv6_newroute={0x24, 0x18, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MARK={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x98}, 0x1}, 0x40001) recvfrom$inet6(r1, &(0x7f000034e000)=""/239, 0xef, 0x100, &(0x7f0000276fe4)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, 0x1c) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xe0, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{'rfc4309(ccm(anubis-generic))\x00'}}, []}, 0xe0}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000ef5000)=':', 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00004c2ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00007e5000)=0x7fe, 0x7c) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x0, @empty}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000aea000)=[], 0x0, &(0x7f0000eed000)=""/81, 0x51}, 0x40002102) [ 40.254108] device gre0 entered promiscuous mode 2018/02/26 09:24:58 executing program 7: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00001d4ff8)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, r1, &(0x7f0000c3d000)='./file0\x00') 2018/02/26 09:24:58 executing program 4: mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000001eff6)='./control\x00', 0xa400095e) mkdir(&(0x7f00007a5ff0)='./control/file0\x00', 0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000677000)) 2018/02/26 09:24:58 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c70ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000014a000)={@common='gre0\x00', @ifru_addrs=@sco={0x1f}}) readv(r1, &(0x7f0000292000)=[{&(0x7f00000b8f7b)=""/133, 0x85}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000e34fe0)={@common='gre0\x00', @ifru_flags=0x301}) 2018/02/26 09:24:58 executing program 3: creat(&(0x7f000060b000)='./file0\x00', 0x0) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) r1 = open(&(0x7f0000a25000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r1) 2018/02/26 09:24:58 executing program 6: futex(&(0x7f0000000080), 0x9, 0x0, &(0x7f00000000c0), &(0x7f0000000000), 0x0) 2018/02/26 09:24:58 executing program 7: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00001d4ff8)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, r1, &(0x7f0000c3d000)='./file0\x00') 2018/02/26 09:24:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000f15ff0)={0x2, 0x2, @rand_addr}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0xfd4a}], 0x1, 0x0) 2018/02/26 09:24:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) 2018/02/26 09:24:58 executing program 4: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002000)={@generic="6b0b9e000000071ea9367a030900", @ifru_settings={0x0, 0x4b, @te1=&(0x7f000000bff0)}}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000002000)) preadv(r0, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/140, 0x8c}], 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000007ff8)=@sco, &(0x7f0000001ffc)=0x8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000001ffc)) 2018/02/26 09:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f7effc)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/26 09:24:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000b74fbc)='oom_score_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000c7e000)='-', 0x1}], 0x1) 2018/02/26 09:24:58 executing program 6: quotactl(0x80000801, &(0x7f0000001ff8)='./file0\x00', 0x0, &(0x7f0000002000)) 2018/02/26 09:24:58 executing program 2: r0 = creat(&(0x7f000092e000)='./file0\x00', 0x0) r1 = open(&(0x7f0000f14ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$int_out(r1, 0xc0189436, &(0x7f000000a000)) 2018/02/26 09:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f7effc)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/26 09:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f7effc)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/26 09:24:58 executing program 7: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00001d4ff8)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, r1, &(0x7f0000c3d000)='./file0\x00') 2018/02/26 09:24:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000ffe000)={@common='lo\x00', &(0x7f0000a60f28)=@ethtool_rxnfc={0x28, 0x0, 0x0, {0x0, @esp_ip6_spec={@empty, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {"842f", @random="f75d3bd3fcaa"}, @esp_ip6_spec={@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @empty}, {';\n', @empty}}, 0x0, []}}) 2018/02/26 09:24:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000f15ff0)={0x2, 0x2, @rand_addr}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0xfd4a}], 0x1, 0x0) [ 40.548207] device gre0 entered promiscuous mode 2018/02/26 09:24:58 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) unshare(0x8000400) flistxattr(r0, &(0x7f0000000000)=""/196, 0xc4) 2018/02/26 09:24:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000010bfc8)={0x0, 0x0, &(0x7f0000a8fff0)={&(0x7f0000e16000)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffffffffffff9a}]}, 0x18}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="0000000100000001667300ac") fchdir(r0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000cd6000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x14) r1 = socket$inet(0xa, 0x1, 0x0) sendmsg(r1, &(0x7f0000004fc8)={&(0x7f0000003164)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000003fc0)=[], 0x0, &(0x7f0000000000)=[]}, 0x20008054) 2018/02/26 09:24:58 executing program 7: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00001d4ff8)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, r1, &(0x7f0000c3d000)='./file0\x00') 2018/02/26 09:24:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f7effc)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) 2018/02/26 09:24:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000f15ff0)={0x2, 0x2, @rand_addr}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0xfd4a}], 0x1, 0x0) 2018/02/26 09:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)) 2018/02/26 09:24:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f000066af40)=""/192, &(0x7f0000c52000)=0x100a8) 2018/02/26 09:24:58 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000008000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2) getitimer(0x0, &(0x7f0000000040)) 2018/02/26 09:24:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000f15ff0)={0x2, 0x2, @rand_addr}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x2, 0x0, @empty}, 0x1c) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0xfd4a}], 0x1, 0x0) 2018/02/26 09:24:58 executing program 7: getgroups(0x0, &(0x7f0000000180)=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000ac000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000ea6000)={&(0x7f0000e1eff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x320}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 5: ioprio_set$pid(0x3, 0x0, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) [ 40.665483] syz-executor2 (6868) used greatest stack depth: 22688 bytes left 2018/02/26 09:24:58 executing program 6: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000be5000)) open(&(0x7f000001dff8)='./file0\x00', 0x80040, 0x0) truncate(&(0x7f0000dbdff8)='./file0\x00', 0x0) 2018/02/26 09:24:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={@generic="5498c463bc29e7fbc2c3f866beef1355"}) accept4$ipx(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 2018/02/26 09:24:58 executing program 7: getgroups(0x0, &(0x7f0000000180)=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000ac000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000ea6000)={&(0x7f0000e1eff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x320}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0xffffffffffffffff, 0x400000000006}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000aa000)=""/8, &(0x7f0000706ffc)=0x8) 2018/02/26 09:24:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 5: ioprio_set$pid(0x3, 0x0, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) 2018/02/26 09:24:58 executing program 0: mkdir(&(0x7f0000dea000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pipefs\x00', 0x1000, &(0x7f0000000140)) 2018/02/26 09:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 7: getgroups(0x0, &(0x7f0000000180)=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000ac000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000ea6000)={&(0x7f0000e1eff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x320}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000001fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002000)='./file0\x00', &(0x7f0000000fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, r1) 2018/02/26 09:24:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000004f28)=""/216, 0x2f) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:24:58 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:58 executing program 7: getgroups(0x0, &(0x7f0000000180)=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000ac000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000ea6000)={&(0x7f0000e1eff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x320}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:24:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0xffffffffffffffff, 0x400000000006}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000aa000)=""/8, &(0x7f0000706ffc)=0x8) 2018/02/26 09:24:58 executing program 5: ioprio_set$pid(0x3, 0x0, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) 2018/02/26 09:24:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:24:58 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000df4000), &(0x7f0000a17000)={{0x0}}) clock_nanosleep(0x0, 0x0, &(0x7f0000245000)={r0}, 0x0) 2018/02/26 09:24:58 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) setrlimit(0xc, &(0x7f0000000100)) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={@generic="5498c463bc29e7fbc2c3f866beef1355"}) accept4$ipx(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 2018/02/26 09:24:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0xffffffffffffffff, 0x400000000006}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000aa000)=""/8, &(0x7f0000706ffc)=0x8) 2018/02/26 09:24:58 executing program 5: ioprio_set$pid(0x3, 0x0, 0x0) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) 2018/02/26 09:24:58 executing program 7: clock_nanosleep(0x5, 0x0, &(0x7f0000577ff0), &(0x7f00008f1000)) 2018/02/26 09:24:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000d6c000)=[{&(0x7f00004dbfde)=""/34}], 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x638, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/02/26 09:24:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={@generic="5498c463bc29e7fbc2c3f866beef1355"}) accept4$ipx(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 2018/02/26 09:24:58 executing program 5: mkdir(&(0x7f0000350ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x100000, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f00000c3000)="6d6f756e74696e666f00a4") sendfile(r1, r1, &(0x7f00008be000)=0x800, 0x401) 2018/02/26 09:24:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000705ff4)={0x10, 0x0, 0xffffffffffffffff, 0x400000000006}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000aa000)=""/8, &(0x7f0000706ffc)=0x8) 2018/02/26 09:24:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0x2, 0x4) sendto$packet(r0, &(0x7f0000015f41), 0x0, 0x0, &(0x7f0000015fec)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="901170f3a1da"}, 0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, &(0x7f0000025000)=""/4096, 0x1000, 0x1000000002000, &(0x7f0000025fec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) 2018/02/26 09:24:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000d6c000)=[{&(0x7f00004dbfde)=""/34}], 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x638, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/02/26 09:24:58 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000000)=@nfc={0x27}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="d4d5b146945e0a0be410e4f614b431d5", 0x10}], 0x1, &(0x7f0000000040)=[{0x10, 0x1, 0x1, "01"}], 0x10}}], 0x2, 0x0) 2018/02/26 09:24:58 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:58 executing program 2: clock_gettime(0x0, &(0x7f0000cd5ff0)={0x0}) setitimer(0x0, &(0x7f0000a0b000)={{}, {r0, 0x7530}}, &(0x7f0000cd5000)) alarm(0x0) 2018/02/26 09:24:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f000024f000)='auxv\x00') pread64(r0, &(0x7f0000235f0d)=""/243, 0xf3, 0x0) 2018/02/26 09:24:58 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000900)='attr/current\x00') write$selinux_context(r1, &(0x7f0000000b80)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27) [ 41.157703] audit: type=1401 audit(1519637098.945:19): op=security_bounded_transition seresult=denied oldcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 newcontext=system_u:object_r:unconfined_exec_t:s0 2018/02/26 09:24:59 executing program 2: r0 = socket$packet(0x11, 0x800000000002, 0x300) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x0) 2018/02/26 09:24:59 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fgetxattr(r0, &(0x7f0000000100)=@random={'os2.', "5eed00"}, &(0x7f0000000140)=""/71, 0x47) 2018/02/26 09:24:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000d6c000)=[{&(0x7f00004dbfde)=""/34}], 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x638, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/02/26 09:24:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/02/26 09:24:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x4000)=nil, 0x4000}) dup3(r1, r0, 0x0) 2018/02/26 09:24:59 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tun(&(0x7f0000783ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) close(r0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={@generic="5498c463bc29e7fbc2c3f866beef1355"}) accept4$ipx(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') 2018/02/26 09:24:59 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvmmsg(r1, &(0x7f0000f40000)=[{{&(0x7f0000ee8000)=@nfc_llcp, 0x60, &(0x7f0000d6c000)=[{&(0x7f00004dbfde)=""/34}], 0x0, &(0x7f0000f40000)=""/7, 0x7}}], 0x638, 0x0, &(0x7f0000f40ff0)={0x77359400}) 2018/02/26 09:24:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b43000)={0x2, 0x0, @empty}, 0x6e) sendto$inet(r0, &(0x7f0000d38f95), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000ad2ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000013c000), 0x0, 0x0, 0x0, 0x0) [ 41.324339] binder: 6991:7000 transaction failed 29189/-22, size 40-8 line 3004 [ 41.335327] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.342679] binder: 6991:7000 transaction failed 29189/-22, size 40-8 line 3004 [ 41.349913] FAULT_FLAG_ALLOW_RETRY missing 30 [ 41.349923] CPU: 0 PID: 7004 Comm: syz-executor5 Not tainted 4.9.84-ga9d0273 #52 2018/02/26 09:24:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700", 0xfffffffff7fffffd, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000385f58)={{0x80}, 'port0\x00', 0xfffffffffffffffe, 0xfffffffffffffffe}) close(r0) 2018/02/26 09:24:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x4000)=nil, 0x4000}) dup3(r1, r0, 0x0) 2018/02/26 09:24:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b43000)={0x2, 0x0, @empty}, 0x6e) sendto$inet(r0, &(0x7f0000d38f95), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000ad2ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000013c000), 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700", 0xfffffffff7fffffd, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000385f58)={{0x80}, 'port0\x00', 0xfffffffffffffffe, 0xfffffffffffffffe}) close(r0) 2018/02/26 09:24:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000041, &(0x7f00005f0000)=""/30, &(0x7f0000787000)=0x24) [ 41.349927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.349942] ffff8801ce1874e0 ffffffff81d956b9 ffff8801ce1877c0 0000000000000000 [ 41.349953] ffff8801c6c5a710 ffff8801ce1876b0 ffff8801c6c5a600 ffff8801ce1876d8 [ 41.349964] ffffffff816626da 00000000000074d7 ffff8801cf41a140 ffff8801cf41a0a0 [ 41.349966] Call Trace: [ 41.349980] [] dump_stack+0xc1/0x128 [ 41.349990] [] handle_userfault+0xa3a/0x1310 [ 41.350002] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 41.350016] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 41.350025] [] ? handle_mm_fault+0x117b/0x2530 [ 41.350032] [] ? handle_mm_fault+0x1fc3/0x2530 [ 41.350038] [] handle_mm_fault+0x1fd1/0x2530 [ 41.350046] [] ? set_next_entity+0x1bf/0xbe0 [ 41.350053] [] ? __pmd_alloc+0x410/0x410 [ 41.350062] [] ? __lock_is_held+0xa1/0xf0 [ 41.350074] [] __do_page_fault+0x5c2/0xd40 [ 41.350083] [] ? mm_fault_error+0x2c0/0x2c0 [ 41.350092] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.350100] [] do_page_fault+0x27/0x30 [ 41.350108] [] page_fault+0x28/0x30 [ 41.350116] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 41.350129] [] ? do_ip_setsockopt.isra.12+0xadc/0x2960 [ 41.350138] [] ? ip_ra_control+0x440/0x440 [ 41.350144] [] ? __lock_acquire+0x629/0x3640 [ 41.350151] [] ? wake_up_q+0x8a/0xe0 [ 41.350160] [] ? drop_futex_key_refs.isra.11+0x63/0xd0 [ 41.350169] [] ? check_preemption_disabled+0x3b/0x200 [ 41.350177] [] ? avc_has_perm+0x28b/0x4f0 [ 41.350184] [] ? avc_has_perm+0x2fd/0x4f0 [ 41.350191] [] ? avc_has_perm+0xb0/0x4f0 [ 41.350198] [] ? avc_has_perm_noaudit+0x450/0x450 [ 41.350206] [] ? check_preemption_disabled+0x3b/0x200 [ 41.350212] [] ? sock_has_perm+0x1c2/0x3e0 [ 41.350219] [] ? sock_has_perm+0x292/0x3e0 [ 41.350225] [] ? sock_has_perm+0x9f/0x3e0 [ 41.350232] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 41.350238] [] compat_ip_setsockopt+0x47/0xd0 [ 41.350247] [] inet_csk_compat_setsockopt+0x95/0x120 [ 41.350254] [] ? ip_setsockopt+0xa0/0xa0 [ 41.350262] [] compat_tcp_setsockopt+0x3d/0x70 [ 41.350271] [] compat_sock_common_setsockopt+0xb2/0x140 [ 41.350279] [] ? tcp_setsockopt+0xd0/0xd0 [ 41.350287] [] compat_SyS_setsockopt+0x149/0x290 [ 41.350295] [] ? sock_common_setsockopt+0xd0/0xd0 [ 41.350304] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 41.350311] [] ? compat_SyS_ioctl+0x8c/0x2050 [ 41.350319] [] ? do_fast_syscall_32+0xcf/0x870 [ 41.350327] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 41.350342] [] do_fast_syscall_32+0x2f5/0x870 [ 41.350349] [] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/02/26 09:24:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700", 0xfffffffff7fffffd, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000385f58)={{0x80}, 'port0\x00', 0xfffffffffffffffe, 0xfffffffffffffffe}) close(r0) 2018/02/26 09:24:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b43000)={0x2, 0x0, @empty}, 0x6e) sendto$inet(r0, &(0x7f0000d38f95), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000ad2ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000013c000), 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:24:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000041, &(0x7f00005f0000)=""/30, &(0x7f0000787000)=0x24) 2018/02/26 09:24:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x4000)=nil, 0x4000}) dup3(r1, r0, 0x0) 2018/02/26 09:24:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000238ff8)=@abs, 0x8, &(0x7f0000bd9000)=[], 0x0, &(0x7f00006f3fe8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000000080)=[], 0x0, &(0x7f000000c000)}, 0x0) 2018/02/26 09:24:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 2018/02/26 09:24:59 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03340487c8735db24a266325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common="677265300000e400", @ifru_flags=0x2fd}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @rand_addr}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000814fb0)={@syzn={0x73, 0x79, 0x7a}, @ifru_names=@generic="07e7bf1e5a4803a4cbe37d273b6d930a"}) 2018/02/26 09:24:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000041, &(0x7f00005f0000)=""/30, &(0x7f0000787000)=0x24) 2018/02/26 09:24:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700", 0xfffffffff7fffffd, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000385f58)={{0x80}, 'port0\x00', 0xfffffffffffffffe, 0xfffffffffffffffe}) close(r0) 2018/02/26 09:24:59 executing program 0: clone(0x200, &(0x7f0000000080), &(0x7f0000744000), &(0x7f0000000040), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8)=[], &(0x7f00006fcff0)=[]) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000d66ff8)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) execve(&(0x7f00003efff8)='./file0\x00', &(0x7f0000a7bff8)=[], &(0x7f0000c6e000)=[]) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) open(&(0x7f0000338ff8)='./file0\x00', 0x401, 0x0) 2018/02/26 09:24:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b43000)={0x2, 0x0, @empty}, 0x6e) sendto$inet(r0, &(0x7f0000d38f95), 0x0, 0x400c000, &(0x7f0000fa2000)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000ad2ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f000013c000), 0x0, 0x0, 0x0, 0x0) [ 41.350360] [] entry_SYSENTER_compat+0x90/0xa2 [ 41.736736] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:24:59 executing program 2: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x8) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d19ff4)={0x80000001}) poll(&(0x7f0000b0afe0)=[{r1}], 0x1, 0x0) 2018/02/26 09:24:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000107d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x19, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f000027cfed)=[], &(0x7f0000249000)=[0x0]}}], 0x0, 0x0, &(0x7f0000c8bfff)}) 2018/02/26 09:24:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000041, &(0x7f00005f0000)=""/30, &(0x7f0000787000)=0x24) 2018/02/26 09:24:59 executing program 7: r0 = gettid() unshare(0x28060400) exit(0x0) syz_open_procfs(r0, &(0x7f000000cff9)='ns/net\x00') [ 41.776498] FAULT_FLAG_ALLOW_RETRY missing 30 [ 41.787011] CPU: 1 PID: 7042 Comm: syz-executor5 Not tainted 4.9.84-ga9d0273 #52 [ 41.794567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.796152] binder: 7061:7063 got transaction with invalid offset (0, min 0 max 0) or object. [ 41.796175] binder: 7061:7063 transaction failed 29201/-22, size 0-8 line 3190 [ 41.808252] binder: BINDER_SET_CONTEXT_MGR already set [ 41.808268] binder: 7061:7066 ioctl 40046207 0 returned -16 [ 41.811681] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.836206] ffff8801cebef4e0 ffffffff81d956b9 ffff8801cebef7c0 0000000000000000 [ 41.844183] ffff8801b6f38a10 ffff8801cebef6b0 ffff8801b6f38900 ffff8801cebef6d8 [ 41.852155] ffffffff816626da 00000000000074d7 ffff8801cebdb940 ffff8801cebdb8a0 [ 41.860126] Call Trace: [ 41.862690] [] dump_stack+0xc1/0x128 [ 41.868026] [] handle_userfault+0xa3a/0x1310 [ 41.874056] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 41.881039] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 41.887414] [] ? handle_mm_fault+0x117b/0x2530 [ 41.893616] [] ? handle_mm_fault+0x1fc3/0x2530 [ 41.899818] [] handle_mm_fault+0x1fd1/0x2530 [ 41.905846] [] ? set_next_entity+0x1bf/0xbe0 [ 41.911875] [] ? __pmd_alloc+0x410/0x410 [ 41.917557] [] ? __lock_is_held+0xa1/0xf0 [ 41.923328] [] __do_page_fault+0x5c2/0xd40 [ 41.929182] [] ? mm_fault_error+0x2c0/0x2c0 [ 41.935126] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.941761] [] do_page_fault+0x27/0x30 [ 41.947272] [] page_fault+0x28/0x30 [ 41.952519] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 41.959330] [] ? do_ip_setsockopt.isra.12+0xadc/0x2960 [ 41.966225] [] ? ip_ra_control+0x440/0x440 [ 41.972082] [] ? __lock_acquire+0x629/0x3640 [ 41.978111] [] ? wake_up_q+0x8a/0xe0 [ 41.983445] [] ? drop_futex_key_refs.isra.11+0x63/0xd0 [ 41.990342] [] ? check_preemption_disabled+0x3b/0x200 [ 41.997152] [] ? avc_has_perm+0x28b/0x4f0 [ 42.002919] [] ? avc_has_perm+0x2fd/0x4f0 [ 42.008684] [] ? avc_has_perm+0xb0/0x4f0 [ 42.014634] [] ? avc_has_perm_noaudit+0x450/0x450 [ 42.021097] [] ? check_preemption_disabled+0x3b/0x200 [ 42.027908] [] ? sock_has_perm+0x1c2/0x3e0 [ 42.033761] [] ? sock_has_perm+0x292/0x3e0 [ 42.039617] [] ? sock_has_perm+0x9f/0x3e0 [ 42.045388] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 42.052458] [] compat_ip_setsockopt+0x47/0xd0 [ 42.058574] [] inet_csk_compat_setsockopt+0x95/0x120 [ 42.065296] [] ? ip_setsockopt+0xa0/0xa0 [ 42.070980] [] compat_tcp_setsockopt+0x3d/0x70 [ 42.077185] [] compat_sock_common_setsockopt+0xb2/0x140 [ 42.084166] [] ? tcp_setsockopt+0xd0/0xd0 [ 42.089934] [] compat_SyS_setsockopt+0x149/0x290 [ 42.096310] [] ? sock_common_setsockopt+0xd0/0xd0 [ 42.102776] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 42.109329] [] ? compat_SyS_ioctl+0x8c/0x2050 [ 42.115443] [] ? do_fast_syscall_32+0xcf/0x870 [ 42.121644] [] ? scm_detach_fds_compat+0x3c0/0x3c0 2018/02/26 09:24:59 executing program 3: clone(0x2000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 2018/02/26 09:24:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/42, 0x2a}], 0x1) [ 42.128192] [] do_fast_syscall_32+0x2f5/0x870 [ 42.134309] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.140945] [] entry_SYSENTER_compat+0x90/0xa2 2018/02/26 09:25:00 executing program 0: mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x5, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001ff7)) 2018/02/26 09:25:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000163000)={@common='lo\x00', &(0x7f0000bc4000)=@ethtool_cmd={0x21}}) 2018/02/26 09:25:00 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000053ffdd)="220000002100070700bee40009001c010a00001e0000091b0000f6ff040011800041", 0x22) 2018/02/26 09:25:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x4000)=nil, 0x4000}) dup3(r1, r0, 0x0) 2018/02/26 09:25:00 executing program 6: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f00000001c0), 0x0) 2018/02/26 09:25:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000001f80)=@generic={0x0, "9ba7877fe0dfa4e383ad3586320cbedff1c1a23bc31ae4bf0cea07838a05ad6f194e0b645e6a52f255d43416baef6c6ffa5b43286c2bf00ceecb115fdde4bfe6c5c8f164e25c5acb5748845a42d815b5dd081d445010c1cc2b947badaf5ce80aa8b1f6c01d8a0260789cd7ce1414426ce33a9b101b58ca48ba7f9ae298cf"}, 0x80) 2018/02/26 09:25:00 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000827000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000c44000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000dd7ff0), &(0x7f0000039ff0)={0x0, 0x8000000}, 0x8) truncate(&(0x7f00005d2ff8)='./file0\x00', 0x0) 2018/02/26 09:25:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000000c0)=[{0xf44, 0x0, 0x0, "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"}], 0xf44}}], 0x1, 0x0) 2018/02/26 09:25:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036cff8)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f000048eff8)='./file0\x00', 0x200) getdents(r0, &(0x7f00000000c0)=""/210, 0xd2) 2018/02/26 09:25:00 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/186, 0xba) 2018/02/26 09:25:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000d69ff0)=[{&(0x7f000019ffff)='2', 0x1}], 0x1) 2018/02/26 09:25:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036cff8)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f000048eff8)='./file0\x00', 0x200) getdents(r0, &(0x7f00000000c0)=""/210, 0xd2) 2018/02/26 09:25:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000015e000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5402, &(0x7f0000c0affb)) ioctl$TCXONC(r1, 0x540a, 0x3) 2018/02/26 09:25:00 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000053ffdd)="220000002100070700bee40009001c010a00001e0000091b0000f6ff040011800041", 0x22) 2018/02/26 09:25:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2276, &(0x7f0000001000)) 2018/02/26 09:25:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:25:00 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000573fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x800000080004531, &(0x7f0000d31000)) 2018/02/26 09:25:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2276, &(0x7f0000001000)) [ 42.771715] binder: 7110:7112 got new transaction with bad transaction stack, transaction 21 has target 7110:0 [ 42.783605] binder: 7110:7112 transaction failed 29201/-71, size 0-0 line 3031 [ 42.792176] binder_alloc: binder_alloc_mmap_handler: 7110 20000000-20002000 already mapped failed -16 [ 42.801714] FAULT_FLAG_ALLOW_RETRY missing 30 [ 42.801723] CPU: 1 PID: 7106 Comm: syz-executor5 Not tainted 4.9.84-ga9d0273 #52 2018/02/26 09:25:00 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000053ffdd)="220000002100070700bee40009001c010a00001e0000091b0000f6ff040011800041", 0x22) 2018/02/26 09:25:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2276, &(0x7f0000001000)) 2018/02/26 09:25:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x28, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x9}]}]}, 0x28}, 0x1}, 0x0) [ 42.801727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.801739] ffff8801b47674e0 ffffffff81d956b9 ffff8801b47677c0 0000000000000000 [ 42.801748] ffff8801c6c5ab90 ffff8801b47676b0 ffff8801c6c5aa80 ffff8801b47676d8 [ 42.801758] ffffffff816626da 00000000000074d7 ffff8801ce03a140 ffff8801ce03a0a0 [ 42.801759] Call Trace: [ 42.801773] [] dump_stack+0xc1/0x128 [ 42.801791] [] handle_userfault+0xa3a/0x1310 [ 42.801803] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 42.801810] [] ? userfaultfd_ioctl+0x24e0/0x24e0 [ 42.801817] [] ? handle_mm_fault+0x117b/0x2530 [ 42.801823] [] ? handle_mm_fault+0x1fc3/0x2530 [ 42.801829] [] handle_mm_fault+0x1fd1/0x2530 [ 42.801837] [] ? set_next_entity+0x1bf/0xbe0 2018/02/26 09:25:00 executing program 7: mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000fb5ffb)={0x73, 0x79, 0x7a}, &(0x7f0000708000)='\x00', 0xfffffffffffffff9) 2018/02/26 09:25:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036cff8)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f000048eff8)='./file0\x00', 0x200) getdents(r0, &(0x7f00000000c0)=""/210, 0xd2) 2018/02/26 09:25:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="6e31075239536c8f5685b186158ab4f2607f52387209f656cebc8e106aa3b45826f3f360de3565a5346e29baf2d3c5b1299d8724bf2a9e310af6099f3a9c79650fcff78c10fa532e35f95edbd15eccc43807a6a71c3cdc68b27318dc3907921c898348da6d9df8f862ae8c330cf42e3c5a4ba601e1cfcd080414c07c7427bbd8b125c0b7dabcf96ea4de0818acb13d684ae0a70a7f6ce910e10aaf58158c111cf2a1ab726695ec4f51f7f644f7989fdad583ef285c1cf7454b05f3ba31b0eddc60aa58e8d5dff570ef9c88bb0992f0b6dfb700e6f87daffd7a4a18e9f45ecb25e12281080964f3f79f83108f55d49c25f54de3bd81d8907d2c3713cf0c03162c52e4763ec6c83acd8b73acb1d02c592e0c6b968fd780800f0d76f2c47d7090844a22b63e2b98654acf10a1f23d8155f155b094bd372472e1a1c288e7fe3ff103f7a33ece44479cbec4ff417e957c7d6dea938e5ba5881dd1f317eaaf40b97cf45bd64e7c81133c609c2576c4e74733e8922e5f4bc7745fb8646900064f7dc9fe70e3632ebaa840dab1e4a35448a00bc2a9292c8c3362877aa0de710e1061a871f73fcd460ca3011f67c12b37954e8225c2af1656ea459af321db7c6fa831ac12622489cd0c4b7964e9454cf70eb9c4dba3d287c5ea00fe71d49e7e7c2ad610145d9a52a4dda5e9ccaceb269059df155f13824c4a4e514ea57889a96f405155497068c871fc4fa35146e3979d2e10d4534bb69a1564aaba90ed817bdfd3aa8308c83e857710ad90539ae6fb100b23a28fc52af4964a2443156e06d620a937f346fcb35e5edd316f42c44998a58a1dc0fe3b1c3d8332a35b3ae160eca7372fbeeb9ef1e6c7ae11187457a59eff3af5acdc73ae0fc18577690b1c2a36e0689c9f59dc858f3e812c1a94268e23f3da142ef39cf807235859d94bd1ba84ddf0c2061b92a0b63c868690bd73ffb9436cdc26e1799ee7ea83e80bb392809d643e276b0ca80a8a83f3e23efda2ad0e8864d66e065d09266b9cda547e78aac2c11ec9917601648a6182e46fa24fddb62b2d683e5af505a5d211c6b5cad75b443c1d6afb0801bef5b3e03aa1a09d6fcda108e02b2acc6090258ef394ef56399dc84d1bed34fda39e70f45a1aa92d753c8572c46163bfc9257df5bfab0a9db2cfef6ed74984b24632fefb3d1be2987f952cf4465de993df70df376dae9b7ad818a4a9a04a13e3b25b034b6d71e7ae8e11bdd4915ecb573580bd472f2025eb4a6a1b6fcb79f6fe2aec3a59ebc2381cbe1d7361bd8ef4097043c662f30ebc57ae752232cb172697dbc74c6af5179e4a123919596e2ff0af20fb5bc4a45884d45eaffafde8d081b8c71a69fdbf48a7d8094585ab7110fd3a075651f8539aa366a3b45d052dd4dfe9c138e113ddb405631bff0b622a8c3a9f2ef0bec4095e0f80c1ebc68dd6d9369ac24bb17612e61d8c0293da8aa08fbdb71715dff87a2ec27b19de75d3b4f38e4f562e9c7007577e35a331ab8211f7910784698971f2cbef47acf1675b83d8befd126e0222de8c57f6c44328ce84375d06fe9180504ae2946c42eed67d498fce515b516d2fdbbff57e127547b57df395c97ec7c0ae05fe5e692a6ee5675799260adcad916bd782bb0be65a753f125b3f20f3c1375f9d00313ef3dec7ab55038aa868cf20f8d236d305ef530040f3c95343d45ef9efc630f9fe37ba7049185acee295e7aa6ddc19af29725de9efa9c54430c789a0e066ca65d20feaad224bcbed83ca45d87e13e8c0318a968f72342071d8f0e4903bed2986c0e7f8f0cd68461edb556b774454c6d20e390457a3b3b753d481adce9982c5799d2967d102f5ac37c8419b08c13777d17089a1424b41ba509876c1cb77c486d029f76450751488f9f592e6eb6ee0951accfed71fcf9addcdc4a2e57fc9d8a964b33b006193ca8c381bfbb171bbf1ea800339e4f6b6a9745c2fe180df61c3ca152e1bdac263a2b2f13868efbc1ac8af2bd3a6afe0a9c9ba59f02f5aa25116e2206edbd5c84d89960d8653f2bd747a8099", 0x5a8) 2018/02/26 09:25:00 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000053ffdd)="220000002100070700bee40009001c010a00001e0000091b0000f6ff040011800041", 0x22) 2018/02/26 09:25:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x28, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x9}]}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2276, &(0x7f0000001000)) [ 42.801844] [] ? __pmd_alloc+0x410/0x410 [ 42.801851] [] ? __lock_is_held+0xa1/0xf0 [ 42.801862] [] __do_page_fault+0x5c2/0xd40 [ 42.801870] [] ? mm_fault_error+0x2c0/0x2c0 [ 42.801878] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.801885] [] do_page_fault+0x27/0x30 [ 42.801894] [] page_fault+0x28/0x30 [ 42.801902] [] ? copy_user_generic_unrolled+0x86/0xc0 [ 42.801913] [] ? do_ip_setsockopt.isra.12+0xadc/0x2960 [ 42.801922] [] ? ip_ra_control+0x440/0x440 [ 42.801928] [] ? __lock_acquire+0x629/0x3640 [ 42.801936] [] ? wake_up_q+0x8a/0xe0 [ 42.801946] [] ? drop_futex_key_refs.isra.11+0x63/0xd0 [ 42.801957] [] ? check_preemption_disabled+0x3b/0x200 [ 42.801965] [] ? avc_has_perm+0x28b/0x4f0 [ 42.801972] [] ? avc_has_perm+0x2fd/0x4f0 [ 42.801980] [] ? avc_has_perm+0xb0/0x4f0 [ 42.801987] [] ? avc_has_perm_noaudit+0x450/0x450 [ 42.801996] [] ? check_preemption_disabled+0x3b/0x200 [ 42.802003] [] ? sock_has_perm+0x1c2/0x3e0 [ 42.802010] [] ? sock_has_perm+0x292/0x3e0 [ 42.802017] [] ? sock_has_perm+0x9f/0x3e0 [ 42.802025] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 42.802033] [] compat_ip_setsockopt+0x47/0xd0 [ 42.802041] [] inet_csk_compat_setsockopt+0x95/0x120 [ 42.802048] [] ? ip_setsockopt+0xa0/0xa0 [ 42.802055] [] compat_tcp_setsockopt+0x3d/0x70 [ 42.802064] [] compat_sock_common_setsockopt+0xb2/0x140 [ 42.802072] [] ? tcp_setsockopt+0xd0/0xd0 [ 42.802080] [] compat_SyS_setsockopt+0x149/0x290 [ 42.802088] [] ? sock_common_setsockopt+0xd0/0xd0 [ 42.802096] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 42.802104] [] ? compat_SyS_ioctl+0x8c/0x2050 [ 42.802111] [] ? do_fast_syscall_32+0xcf/0x870 [ 42.802119] [] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 42.802126] [] do_fast_syscall_32+0x2f5/0x870 [ 42.802133] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.802140] [] entry_SYSENTER_compat+0x90/0xa2 [ 42.817904] binder: BINDER_SET_CONTEXT_MGR already set [ 42.817912] binder: 7110:7112 ioctl 40046207 0 returned -16 [ 42.818259] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 42.950046] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.197531] binder_alloc: 7110: binder_alloc_buf, no vma [ 43.203064] binder: 7110:7153 transaction failed 29189/-3, size 0-0 line 3127 [ 43.211627] binder_alloc: 7110: binder_alloc_buf, no vma [ 43.217107] binder: 7110:7120 transaction failed 29189/-3, size 0-0 line 3127 2018/02/26 09:25:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:01 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f000049e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000bdc000)=0x14, 0x0) sendmsg$nl_route(r0, &(0x7f0000490000)={&(0x7f00002ecff4)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f00009c2f90)=@ipv4_newroute={0x24, 0x18, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@RTA_IIF={0x8, 0x1, r1}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:01 executing program 2: clock_getres(0x0, &(0x7f00002c7ff8)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000483000)={0x0, r0}, &(0x7f000042c000)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006d5000)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x28, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x9}]}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:01 executing program 4: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)=@generic="f29e18e6c832ec578d3ebf0c39aed93e") r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) r1 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={@common='lo\x00', 0x0}) bind(r1, &(0x7f0000002000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[]}, &(0x7f00000001c0)=0xc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)) close(r0) 2018/02/26 09:25:01 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000adb000)="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", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="6e31075239536c8f5685b186158ab4f2607f52387209f656cebc8e106aa3b45826f3f360de3565a5346e29baf2d3c5b1299d8724bf2a9e310af6099f3a9c79650fcff78c10fa532e35f95edbd15eccc43807a6a71c3cdc68b27318dc3907921c898348da6d9df8f862ae8c330cf42e3c5a4ba601e1cfcd080414c07c7427bbd8b125c0b7dabcf96ea4de0818acb13d684ae0a70a7f6ce910e10aaf58158c111cf2a1ab726695ec4f51f7f644f7989fdad583ef285c1cf7454b05f3ba31b0eddc60aa58e8d5dff570ef9c88bb0992f0b6dfb700e6f87daffd7a4a18e9f45ecb25e12281080964f3f79f83108f55d49c25f54de3bd81d8907d2c3713cf0c03162c52e4763ec6c83acd8b73acb1d02c592e0c6b968fd780800f0d76f2c47d7090844a22b63e2b98654acf10a1f23d8155f155b094bd372472e1a1c288e7fe3ff103f7a33ece44479cbec4ff417e957c7d6dea938e5ba5881dd1f317eaaf40b97cf45bd64e7c81133c609c2576c4e74733e8922e5f4bc7745fb8646900064f7dc9fe70e3632ebaa840dab1e4a35448a00bc2a9292c8c3362877aa0de710e1061a871f73fcd460ca3011f67c12b37954e8225c2af1656ea459af321db7c6fa831ac12622489cd0c4b7964e9454cf70eb9c4dba3d287c5ea00fe71d49e7e7c2ad610145d9a52a4dda5e9ccaceb269059df155f13824c4a4e514ea57889a96f405155497068c871fc4fa35146e3979d2e10d4534bb69a1564aaba90ed817bdfd3aa8308c83e857710ad90539ae6fb100b23a28fc52af4964a2443156e06d620a937f346fcb35e5edd316f42c44998a58a1dc0fe3b1c3d8332a35b3ae160eca7372fbeeb9ef1e6c7ae11187457a59eff3af5acdc73ae0fc18577690b1c2a36e0689c9f59dc858f3e812c1a94268e23f3da142ef39cf807235859d94bd1ba84ddf0c2061b92a0b63c868690bd73ffb9436cdc26e1799ee7ea83e80bb392809d643e276b0ca80a8a83f3e23efda2ad0e8864d66e065d09266b9cda547e78aac2c11ec9917601648a6182e46fa24fddb62b2d683e5af505a5d211c6b5cad75b443c1d6afb0801bef5b3e03aa1a09d6fcda108e02b2acc6090258ef394ef56399dc84d1bed34fda39e70f45a1aa92d753c8572c46163bfc9257df5bfab0a9db2cfef6ed74984b24632fefb3d1be2987f952cf4465de993df70df376dae9b7ad818a4a9a04a13e3b25b034b6d71e7ae8e11bdd4915ecb573580bd472f2025eb4a6a1b6fcb79f6fe2aec3a59ebc2381cbe1d7361bd8ef4097043c662f30ebc57ae752232cb172697dbc74c6af5179e4a123919596e2ff0af20fb5bc4a45884d45eaffafde8d081b8c71a69fdbf48a7d8094585ab7110fd3a075651f8539aa366a3b45d052dd4dfe9c138e113ddb405631bff0b622a8c3a9f2ef0bec4095e0f80c1ebc68dd6d9369ac24bb17612e61d8c0293da8aa08fbdb71715dff87a2ec27b19de75d3b4f38e4f562e9c7007577e35a331ab8211f7910784698971f2cbef47acf1675b83d8befd126e0222de8c57f6c44328ce84375d06fe9180504ae2946c42eed67d498fce515b516d2fdbbff57e127547b57df395c97ec7c0ae05fe5e692a6ee5675799260adcad916bd782bb0be65a753f125b3f20f3c1375f9d00313ef3dec7ab55038aa868cf20f8d236d305ef530040f3c95343d45ef9efc630f9fe37ba7049185acee295e7aa6ddc19af29725de9efa9c54430c789a0e066ca65d20feaad224bcbed83ca45d87e13e8c0318a968f72342071d8f0e4903bed2986c0e7f8f0cd68461edb556b774454c6d20e390457a3b3b753d481adce9982c5799d2967d102f5ac37c8419b08c13777d17089a1424b41ba509876c1cb77c486d029f76450751488f9f592e6eb6ee0951accfed71fcf9addcdc4a2e57fc9d8a964b33b006193ca8c381bfbb171bbf1ea800339e4f6b6a9745c2fe180df61c3ca152e1bdac263a2b2f13868efbc1ac8af2bd3a6afe0a9c9ba59f02f5aa25116e2206edbd5c84d89960d8653f2bd747a8099", 0x5a8) 2018/02/26 09:25:01 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036cff8)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f000048eff8)='./file0\x00', 0x200) getdents(r0, &(0x7f00000000c0)=""/210, 0xd2) 2018/02/26 09:25:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001f000)=@ipv6_newroute={0x28, 0x18, 0x781a241f, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0xc, 0x9, [{0x9}]}]}, 0x28}, 0x1}, 0x0) [ 43.227345] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.232866] binder: release 7110:7112 transaction 21 out, still active [ 43.239553] binder: send failed reply for transaction 21, target dead 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x0, 0x6}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/57) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 2018/02/26 09:25:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000aa1fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000d6b000)=[{{}, 0x100000001, 0x1000}], 0x18) [ 43.262191] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.283055] binder: 7163:7171 got new transaction with bad transaction stack, transaction 26 has target 7163:0 [ 43.283065] binder: 7163:7171 transaction failed 29201/-71, size 0-0 line 3031 [ 43.306319] binder: send failed reply for transaction 26 to 7163:7171 [ 43.313606] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.324574] binder: 7181:7182 got new transaction with bad transaction stack, transaction 29 has target 7181:0 [ 43.335196] binder: 7181:7182 transaction failed 29201/-71, size 0-0 line 3031 [ 43.351836] binder: send failed reply for transaction 29 to 7181:7182 [ 43.358490] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000c7a000), 0x0, 0x20000004, &(0x7f0000b23000)={0xa, 0x2, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x0, 0xbb}}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000625000)=0x2, 0x4) r2 = dup2(r0, r1) write$tun(r2, &(0x7f000085ff3c)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "d967e4", 0x57d, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, {[], @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x57d, 0x0, "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"}}}}, 0x5a9) write(r0, &(0x7f0000000000)="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", 0x5a8) 2018/02/26 09:25:01 executing program 2: clock_getres(0x0, &(0x7f00002c7ff8)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000483000)={0x0, r0}, &(0x7f000042c000)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006d5000)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x0, 0x6}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/57) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:01 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80102, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000500)="eb884af9e1ec", 0x6}], 0x1, 0x0) 2018/02/26 09:25:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000aa1fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000d6b000)=[{{}, 0x100000001, 0x1000}], 0x18) 2018/02/26 09:25:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00003a7000)='ns/net\x00') setns(r0, 0x3) 2018/02/26 09:25:01 executing program 0: r0 = socket(0x1000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000d9b000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000f98000)={0x10}, 0x2c5, &(0x7f0000f75ff0)={&(0x7f0000f85fa8)=@newneigh={0x28, 0x1c, 0x303, 0xffffffffffffffff, 0xffffffffffffffff, {0x100000000000007, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:01 executing program 2: clock_getres(0x0, &(0x7f00002c7ff8)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000483000)={0x0, r0}, &(0x7f000042c000)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006d5000)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000b08fd8)={@common='lo\x00', @ifru_addrs=@rc={0x1f}}) 2018/02/26 09:25:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 43.497937] binder: 7189:7191 got new transaction with bad transaction stack, transaction 32 has target 7189:0 [ 43.499929] keychord: Insufficient bytes present for keycount 0 [ 43.504518] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.535016] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:25:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='vboxnet0^') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) writev(r0, &(0x7f0000000040)=[], 0x1) [ 43.536358] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 43.543460] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 43.546307] binder: 7189:7191 transaction failed 29201/-71, size 0-0 line 3031 [ 43.623120] binder: 7184:7197 ioctl 40046207 0 returned -16 [ 43.623905] binder: send failed reply for transaction 32 to 7189:7191 [ 43.628889] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.651417] binder: send failed reply for transaction 34 to 7184:7215 [ 43.662987] binder: send failed reply for transaction 36 to 7184:7221 2018/02/26 09:25:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x0, 0x6}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/57) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 2018/02/26 09:25:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000aa1fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000d6b000)=[{{}, 0x100000001, 0x1000}], 0x18) 2018/02/26 09:25:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='vboxnet0^') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) writev(r0, &(0x7f0000000040)=[], 0x1) 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="00634040000000009e00000000000000000000000000000000000000000000000000000028000000000000000800000000000000", @ANYPTR64=&(0x7f000000afd0)=ANY=[@ANYBLOB="00000000d3263a42"]], 0x0, 0x0, &(0x7f0000009000)}) 2018/02/26 09:25:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000afd0)={0x28, 0x0, &(0x7f0000009f84)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x15b, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/02/26 09:25:01 executing program 2: clock_getres(0x0, &(0x7f00002c7ff8)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000483000)={0x0, r0}, &(0x7f000042c000)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00006d5000)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='vboxnet0^') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) writev(r0, &(0x7f0000000040)=[], 0x1) 2018/02/26 09:25:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x0, 0x6}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/57) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 2018/02/26 09:25:01 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00006ac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f000079efdc)) r1 = syz_open_pts(r0, 0x801) close(r0) write(r1, &(0x7f00000b5000), 0xfffffed2) [ 43.674794] binder: send failed reply for transaction 37 to 7211:7223 [ 43.688420] binder: send failed reply for transaction 38 to 7211:7214 [ 43.704293] binder: 7230:7239 got transaction with invalid offsets ptr 2018/02/26 09:25:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='vboxnet0^') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) writev(r0, &(0x7f0000000040)=[], 0x1) [ 43.722145] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:25:01 executing program 4: mount(&(0x7f0000784ffe)='..', &(0x7f0000000000)='..', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) 2018/02/26 09:25:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x705, &(0x7f000073dfff)) 2018/02/26 09:25:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000501000)) 2018/02/26 09:25:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "a9bfdf401802"}, 0x10, &(0x7f0000000080)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000000)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[]}}], 0x2, 0x0) 2018/02/26 09:25:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000aa1fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000d6b000)=[{{}, 0x100000001, 0x1000}], 0x18) 2018/02/26 09:25:01 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 43.722154] binder: 7233:7241 ioctl 40046207 0 returned -16 [ 43.722767] binder: 7233:7241 got new transaction with bad transaction stack, transaction 41 has target 7230:0 [ 43.722778] binder: 7233:7241 transaction failed 29201/-71, size 0-0 line 3031 [ 43.728373] binder: undelivered TRANSACTION_COMPLETE [ 43.728380] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.728389] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.728407] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.728423] binder: undelivered TRANSACTION_COMPLETE [ 43.728428] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.739439] binder: release 7233:7241 transaction 41 out, still active [ 43.756244] binder: BINDER_SET_CONTEXT_MGR already set [ 43.756262] binder: 7230:7253 ioctl 40046207 0 returned -16 [ 43.757476] binder_alloc: 7230: binder_alloc_buf, no vma 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="00634040000000009e00000000000000000000000000000000000000000000000000000028000000000000000800000000000000", @ANYPTR64=&(0x7f000000afd0)=ANY=[@ANYBLOB="00000000d3263a42"]], 0x0, 0x0, &(0x7f0000009000)}) 2018/02/26 09:25:01 executing program 0: syslog(0x3, &(0x7f0000001140)=""/4096, 0xffffffffffffffcb) 2018/02/26 09:25:01 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000f0fffa)='./bus\x00', &(0x7f0000029ff2)='./file0\x00', &(0x7f0000937000)='ramfs\x00', 0x0, &(0x7f000003ef63)) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000bc7000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000060000)='./file0\x00', 0x200) 2018/02/26 09:25:01 executing program 7: r0 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00002f4ffc)={0x0, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000670000), &(0x7f00000a7000)=0x4) 2018/02/26 09:25:01 executing program 4: mlock2(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000002f37), &(0x7f0000a95ffc), &(0x7f0000b24ffc), &(0x7f0000002000)) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:25:01 executing program 5: request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='\'eth0\x00', 0xfffffffffffffffb) 2018/02/26 09:25:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f000010b000)='net/raw6\x00') fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 2018/02/26 09:25:01 executing program 1: r0 = gettid() exit(0x0) tkill(r0, 0x0) 2018/02/26 09:25:01 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000c000)={{&(0x7f0000009000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000dfe0)={{&(0x7f0000006000/0x3000)=nil, 0x3000}, 0x1}) 2018/02/26 09:25:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') pread64(r0, &(0x7f0000000000)=""/8, 0xf2463ae819d2026c, 0x38) [ 43.757494] binder: 7230:7253 transaction failed 29189/-3, size 40-8 line 3127 [ 43.867357] binder: 7230:7239 transaction failed 29201/-14, size 40-8 line 3155 [ 43.876481] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.882725] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.888191] binder: send failed reply for transaction 41, target dead 2018/02/26 09:25:01 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) madvise(&(0x7f000001c000/0x3000)=nil, 0x3000, 0xa) mremap(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00003a4000/0x2000)=nil) [ 43.903704] binder: 7277:7283 got transaction with invalid offsets ptr [ 43.903729] binder: 7277:7283 transaction failed 29201/-14, size 40-8 line 3155 [ 43.932856] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="00634040000000009e00000000000000000000000000000000000000000000000000000028000000000000000800000000000000", @ANYPTR64=&(0x7f000000afd0)=ANY=[@ANYBLOB="00000000d3263a42"]], 0x0, 0x0, &(0x7f0000009000)}) 2018/02/26 09:25:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvfrom$inet(r0, &(0x7f0000ffc000)=""/109, 0xfffffffffffffd9c, 0x0, &(0x7f0000797ffd)={0x2, 0xffffffffffffffff, @empty}, 0x2) 2018/02/26 09:25:01 executing program 2: setrlimit(0x9, &(0x7f0000f3b000)) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:25:01 executing program 0: socketpair(0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000823000)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) pkey_free(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0xfffffffffffffeb1) ioctl$KDSETLED(r3, 0x4b32, 0x40) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/26 09:25:01 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x80000) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/26 09:25:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f000035cfe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:25:01 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/26 09:25:01 executing program 1: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x2000000000000, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x32}, 0x0, @in6=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:01 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/26 09:25:01 executing program 2: setrlimit(0x9, &(0x7f0000f3b000)) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 44.018665] binder: 7303:7315 got transaction with invalid offsets ptr [ 44.031292] l2tp_core: tunl 4: fd 19 wrong protocol, got 1, expected 17 [ 44.043846] binder: 7303:7315 transaction failed 29201/-14, size 40-8 line 3155 [ 44.057595] l2tp_core: tunl 4: fd 21 wrong protocol, got 1, expected 17 [ 44.060259] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:25:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f000035cfe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:25:01 executing program 2: setrlimit(0x9, &(0x7f0000f3b000)) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:25:01 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/26 09:25:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000f85000)=0x800, 0x4) recvmmsg(r0, &(0x7f0000f84000)=[{{&(0x7f0000f84fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f000083df70)=[], 0x0, &(0x7f0000f84000)=""/167, 0xa7}}], 0x1, 0x0, &(0x7f0000f84ff0)={0x0, 0x989680}) 2018/02/26 09:25:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x3c, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="00634040000000009e00000000000000000000000000000000000000000000000000000028000000000000000800000000000000", @ANYPTR64=&(0x7f000000afd0)=ANY=[@ANYBLOB="00000000d3263a42"]], 0x0, 0x0, &(0x7f0000009000)}) 2018/02/26 09:25:01 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x80000) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/26 09:25:01 executing program 1: timer_create(0x9, &(0x7f0000ad1000)={0x0, 0x14, 0x0, @tid}, &(0x7f0000044000)) 2018/02/26 09:25:01 executing program 0: socketpair(0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000823000)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) pkey_free(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0xfffffffffffffeb1) ioctl$KDSETLED(r3, 0x4b32, 0x40) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/26 09:25:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f000035cfe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:25:01 executing program 2: setrlimit(0x9, &(0x7f0000f3b000)) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/02/26 09:25:02 executing program 1: timer_create(0x9, &(0x7f0000ad1000)={0x0, 0x14, 0x0, @tid}, &(0x7f0000044000)) 2018/02/26 09:25:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000), 0x4) write(r1, &(0x7f0000000080)="d1", 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001a000)=[], 0x0, &(0x7f000001b000)}, 0x2) 2018/02/26 09:25:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f000035cfe2)=""/30, &(0x7f0000000000)=0x1e) 2018/02/26 09:25:02 executing program 1: timer_create(0x9, &(0x7f0000ad1000)={0x0, 0x14, 0x0, @tid}, &(0x7f0000044000)) 2018/02/26 09:25:02 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs(0x0, &(0x7f0000e4fff0)='ns/uts\x00') 2018/02/26 09:25:02 executing program 0: socketpair(0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000823000)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) pkey_free(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0xfffffffffffffeb1) ioctl$KDSETLED(r3, 0x4b32, 0x40) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/26 09:25:02 executing program 1: timer_create(0x9, &(0x7f0000ad1000)={0x0, 0x14, 0x0, @tid}, &(0x7f0000044000)) 2018/02/26 09:25:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 2018/02/26 09:25:02 executing program 4: mmap(&(0x7f0000000000/0x822000)=nil, 0x822000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000822000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000632ff9)=""/122) [ 44.206519] l2tp_core: tunl 4: fd 19 wrong protocol, got 1, expected 17 [ 44.223837] binder_alloc: 7414: binder_alloc_buf, no vma [ 44.223855] binder: 7414:7433 transaction failed 29189/-3, size 40-8 line 3127 [ 44.239758] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000aad000)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:25:02 executing program 7: r0 = memfd_create(&(0x7f00007b0000)="1f00", 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000263ff8)=0xfffffffffffffffe, 0x0) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet(r0, &(0x7f0000a6efff), 0xbc, 0x20020003, &(0x7f0000385ff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x10, &(0x7f0000003180)=[], 0x0, &(0x7f00000031c0)=[]}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, &(0x7f0000005780)=[], 0x8d, &(0x7f0000005800)=[{0x10, 0x18d}], 0x10}}], 0x2, 0x0) 2018/02/26 09:25:02 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0xfb, @tick}) 2018/02/26 09:25:02 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x80000) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/26 09:25:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000f85000)=0x800, 0x4) recvmmsg(r0, &(0x7f0000f84000)=[{{&(0x7f0000f84fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f000083df70)=[], 0x0, &(0x7f0000f84000)=""/167, 0xa7}}], 0x1, 0x0, &(0x7f0000f84ff0)={0x0, 0x989680}) 2018/02/26 09:25:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) 2018/02/26 09:25:02 executing program 0: socketpair(0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000823000)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0) r4 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)='\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) pkey_free(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r5}, &(0x7f0000000240)=0xfffffffffffffeb1) ioctl$KDSETLED(r3, 0x4b32, 0x40) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}}) 2018/02/26 09:25:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f00006c6000)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1, 0x62) 2018/02/26 09:25:02 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000483, &(0x7f0000059fe8)=""/24, &(0x7f0000aed000)=0xfe) 2018/02/26 09:25:02 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000938ff4)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) r2 = dup2(r1, r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/82) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@local, @local}, &(0x7f00000000c0)=0xc) connect$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0x0, "0a0e5707d773dd99ecab2e7a7d8f4a2be7d7a5585e40f940a511dcc85fb7582f88e8190ec07c8084d3f4594d8b82d6ab67e7266dbaf199dca651d0158acfe0", 0x4}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x6}) 2018/02/26 09:25:02 executing program 1: mmap(&(0x7f0000000000/0xb32000)=nil, 0xb32000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f00002ee000), 0xffffffffffffff00}], 0x383, 0x0) 2018/02/26 09:25:02 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) dup3(r1, r0, 0x80000) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/02/26 09:25:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newneigh={0x24, 0x1c, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000f85000)=0x800, 0x4) recvmmsg(r0, &(0x7f0000f84000)=[{{&(0x7f0000f84fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f000083df70)=[], 0x0, &(0x7f0000f84000)=""/167, 0xa7}}], 0x1, 0x0, &(0x7f0000f84ff0)={0x0, 0x989680}) [ 44.379097] l2tp_core: tunl 4: fd 19 wrong protocol, got 1, expected 17 2018/02/26 09:25:02 executing program 7: r0 = socket(0xa, 0x2, 0x0) seccomp(0x1, 0x0, &(0x7f0000947ff0)={0x1, &(0x7f000005eff0)=[{0x6}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000f9a000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x80000000000004c, &(0x7f0000b54ffc)=0x1000000, 0x4) [ 44.426017] l2tp_core: tunl 4: fd 19 wrong protocol, got 1, expected 17 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) 2018/02/26 09:25:02 executing program 1: mmap(&(0x7f0000000000/0xb32000)=nil, 0xb32000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f00002ee000), 0xffffffffffffff00}], 0x383, 0x0) 2018/02/26 09:25:02 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000032fef)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00003e7000)={0x60000001}) 2018/02/26 09:25:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000f85000)=0x800, 0x4) recvmmsg(r0, &(0x7f0000f84000)=[{{&(0x7f0000f84fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x14, &(0x7f000083df70)=[], 0x0, &(0x7f0000f84000)=""/167, 0xa7}}], 0x1, 0x0, &(0x7f0000f84ff0)={0x0, 0x989680}) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000aad000)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:25:02 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) tkill(r2, 0x8) 2018/02/26 09:25:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000eb9ff9)="666400000004bb") getdents64(r0, &(0x7f00006a1000)=""/42, 0x2a) getdents(r0, &(0x7f0000002fd0)=""/48, 0x30) 2018/02/26 09:25:02 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000938ff4)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) r2 = dup2(r1, r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/82) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@local, @local}, &(0x7f00000000c0)=0xc) connect$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0x0, "0a0e5707d773dd99ecab2e7a7d8f4a2be7d7a5585e40f940a511dcc85fb7582f88e8190ec07c8084d3f4594d8b82d6ab67e7266dbaf199dca651d0158acfe0", 0x4}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x6}) 2018/02/26 09:25:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00003e3ff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4024700a) 2018/02/26 09:25:02 executing program 1: mmap(&(0x7f0000000000/0xb32000)=nil, 0xb32000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f00002ee000), 0xffffffffffffff00}], 0x383, 0x0) 2018/02/26 09:25:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000eb9ff9)="666400000004bb") getdents64(r0, &(0x7f00006a1000)=""/42, 0x2a) getdents(r0, &(0x7f0000002fd0)=""/48, 0x30) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) 2018/02/26 09:25:02 executing program 6: timer_settime(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) 2018/02/26 09:25:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00008cd000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) dup2(r0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000d4a000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000578ff4)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000304000)) 2018/02/26 09:25:02 executing program 1: mmap(&(0x7f0000000000/0xb32000)=nil, 0xb32000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f00002ee000), 0xffffffffffffff00}], 0x383, 0x0) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000aad000)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:25:02 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000938ff4)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) r2 = dup2(r1, r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/82) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@local, @local}, &(0x7f00000000c0)=0xc) connect$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0x0, "0a0e5707d773dd99ecab2e7a7d8f4a2be7d7a5585e40f940a511dcc85fb7582f88e8190ec07c8084d3f4594d8b82d6ab67e7266dbaf199dca651d0158acfe0", 0x4}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x6}) 2018/02/26 09:25:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000eb9ff9)="666400000004bb") getdents64(r0, &(0x7f00006a1000)=""/42, 0x2a) getdents(r0, &(0x7f0000002fd0)=""/48, 0x30) 2018/02/26 09:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f0000f67000)="3900000011000946f9bb61e1c30500ff070000000200000045efffff08009b0019001a000f00000021f600000003000004e9ff0006000d0005", 0x39}], 0x1) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000aad000)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd, @tick, {}, {}, @note}], 0x30) 2018/02/26 09:25:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000042001ffff71bf507002304000afff511080010400005ffff0800000000060000", 0x24) 2018/02/26 09:25:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000000)=@nfc={0x27}, 0x10, &(0x7f0000007380)=[], 0x0, &(0x7f0000000040)=[{0x10, 0x1, 0x1, "01ed"}], 0x10}}], 0x2, 0x0) 2018/02/26 09:25:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f0000f67000)="3900000011000946f9bb61e1c30500ff070000000200000045efffff08009b0019001a000f00000021f600000003000004e9ff0006000d0005", 0x39}], 0x1) 2018/02/26 09:25:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000eb9ff9)="666400000004bb") getdents64(r0, &(0x7f00006a1000)=""/42, 0x2a) getdents(r0, &(0x7f0000002fd0)=""/48, 0x30) 2018/02/26 09:25:02 executing program 1: setresgid(0x0, 0x0, 0x0) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa000000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8a6, 0x0, 0x0, 0x0, 0x0, 0x0, "8b2d66126ced5667f17130e1ff3196ad5f09abde14e866f9276a2c10ac65a0994ff74aecd69e8a46f244a32c883f5db7c4554cb99b5be17c90c206fe9b706a93", "f9e5bea889c760707a2eddbf5d8e3fda7868e6254e61b74c31ef256d10c8c41b59cb1f3f4564c7fcab0af08c7bd702e7cab5e36b3225a5f903d2a21f6aba7ec0", "f18f8aeedfe1957bc359c951a1c36566dc3f4d03ba0af8de81db7ad5b644a1ce"}) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x40001) 2018/02/26 09:25:02 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000e9b18a)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000938ff4)={@multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) r2 = dup2(r1, r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/82) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@local, @local}, &(0x7f00000000c0)=0xc) connect$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0x0, "0a0e5707d773dd99ecab2e7a7d8f4a2be7d7a5585e40f940a511dcc85fb7582f88e8190ec07c8084d3f4594d8b82d6ab67e7266dbaf199dca651d0158acfe0", 0x4}, 0x58) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x6}) 2018/02/26 09:25:02 executing program 1: setresgid(0x0, 0x0, 0x0) 2018/02/26 09:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f0000f67000)="3900000011000946f9bb61e1c30500ff070000000200000045efffff08009b0019001a000f00000021f600000003000004e9ff0006000d0005", 0x39}], 0x1) 2018/02/26 09:25:02 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 1: setresgid(0x0, 0x0, 0x0) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 1: setresgid(0x0, 0x0, 0x0) 2018/02/26 09:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f0000f67000)="3900000011000946f9bb61e1c30500ff070000000200000045efffff08009b0019001a000f00000021f600000003000004e9ff0006000d0005", 0x39}], 0x1) 2018/02/26 09:25:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa000000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8a6, 0x0, 0x0, 0x0, 0x0, 0x0, "8b2d66126ced5667f17130e1ff3196ad5f09abde14e866f9276a2c10ac65a0994ff74aecd69e8a46f244a32c883f5db7c4554cb99b5be17c90c206fe9b706a93", "f9e5bea889c760707a2eddbf5d8e3fda7868e6254e61b74c31ef256d10c8c41b59cb1f3f4564c7fcab0af08c7bd702e7cab5e36b3225a5f903d2a21f6aba7ec0", "f18f8aeedfe1957bc359c951a1c36566dc3f4d03ba0af8de81db7ad5b644a1ce"}) 2018/02/26 09:25:02 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x41, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="c8", 0x1}], 0x1) 2018/02/26 09:25:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) read(r0, &(0x7f0000744000)=""/4096, 0x1000) 2018/02/26 09:25:02 executing program 6: nanosleep(&(0x7f00003a1000)={0x77359400}, &(0x7f0000815ff8)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00006cfff0)=""/16, 0x10, 0x0, &(0x7f00006cf000)={0x0, r0}) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb5370734681305261aec26b9f309ddf8c4cb8f7a32181a41722af15009ecd0f0080d3b55ec7f4338a45f8c3b976b36f8f21e1b612763db6213864fdde6f3c114471844c7e5cd22a7922be21fc9984a403682c8407c059810f0f715a8a5d56e640486589bac4d88a79ef15437423caeb1b2c506ae14de606d627fce1fdc6f6d3907a670d93e6ece58cb79150b8844c4a3", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 1: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) tkill(r0, 0x16) getpeername$unix(r1, &(0x7f00000001c0)=@file={0x0, ""/4096}, &(0x7f0000000080)=0x1002) open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) 2018/02/26 09:25:02 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x5, 0x0) pread64(r0, &(0x7f00000000c0)=""/55, 0x37, 0x0) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="b14f48843d1747f0f7b5002dc76d6a24bdd0a6cdf2e04b5392fefec64400c904f609ca7919c8d30de4191ee0aae642e6b405095f44fe4823da52f695de6f5fbde2af1d266e78e9a1cb995f0c664326f4762412d357f25bfa83c41520765e7c817937ad31dd81cebbc7a6dfe6e45d7b1da9caf5ac14f0d122951f4bbe63510c0f784127bdd2d077e20b2f6d3b6204cd13ecc48deaaa272ae3d7f958909c2fdc7e3529dff80e82f45c7f48fc5f60c6ed468adb5632b439f5e7e3a37e50e53f63f04afee9d34555377eb137a65f7f659c25d745bbed3365f05b61b4e7e500cd884f3c66dd731a9ab601ba62c364bcc12c9c7e36b94cd6c57066e97a69454a17d12262b239ad29180a2b74d12c11ce9b0b7c2b89e8aeb129b970b48cfd3f1f94669ff9a3cabcfcb36a644a234ae304a28a12fc778b2022964192d0f0864762c30a10c47543afbec7bfe220c78545425d84b4418c0ac23f4a482d8cc3a709ea6aa0717e67eee0baf40852bd216de8260e66e058adc356591430cfcba3844496ae55ebb66c8f2fd2f03e309df1d3a4adfe49fcdce7e58ac4d9ad03d451fd0917258db813753525d76196ffeedd09b8b4606e040baa3e64b99b65e7cf656cecb0ef44654803bcef5aa1b6330eef554c52652eb1684c026a60f596d43c4f08a1a2b222d878ed88a4ccd00a8896f97587eac5f79a7032d9904afc6011645801550a3615cdbe5a32e1b0c74f0cd44f6ee358b2bb738e784ffa889bd9d1518f9f2810d4c1b2a8301dc740470f4fe571574056129b11c569a4f8a279423935a6bc2232727bc4596236d5840e99907f5b56bcec968502a276482146c3598cc3a11e2fea65a335038a1147da873b40e38cf16f77558e5e412435e0c005479a50bce7b1e8ef135dea2327dd1f2d2114e8ea832e2bd9940af1c0ccd42e1b1318829487b1130dbc2cabfa0d5303ae7b799c345d644d3e1a04dc25498d18335c1ac404fd7f1730e1e73cb9dc1ce588572d8eae4c514a2b0ded303db0d0e02cc44c525aaeb89e5f75a6f38f0ad43ad8d8a204aa8b6aa670c50e9d06d732cbf7b3e182ee8a12b7c7432dc44f2ae7123f58e05960b8621bf77ca0a8148ce61aa5ae33b053a05423bba20572774c944fc0198a08f7ee1e8dadfa99f8641d512d31a27003cc56580dde62d778a2dcbe92597afd9bf90b79e35f0ffafa13ae0d9bf575830ae8a0a0d4bdb8e7b4db24713a51efce5df0b3eccbf6e2cebfeb39c27093f8efcce0cb1103def488020be131932a6992be9ba0ec5473020fd476434a7360c0f2046f32e5f235e9597f35708a9bedfe34df07d9c90f98c1feb9b6bd4d9e4cdb073d443d48ceeeaf986bca06038220861a3b31ec238e7e113995ff103630155722d012f3e3ff9f17c459c06d83c01e5c613e25fe5bb7e85b528ed81acfaee8dbadf301", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000936ffc)=0x3) poll(&(0x7f00006d0fc8)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r1, &(0x7f00000f0ff0)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000f66000)='hybla\x00', 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000f1c000)={&(0x7f0000834000)={0x10}, 0xc, &(0x7f00007faff0)={&(0x7f0000687000)=@acquire={0x128, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@loopback=0x7f000001}, @in=@multicast1=0xe0000001, {@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@empty}, {{@in=@multicast1=0xe0000001, @in6=@mcast1={0xff, 0x1, [], 0x1}}}}, []}, 0x128}, 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000a31fc8)={&(0x7f00002a4000)={0x10}, 0xc, &(0x7f0000c09ff0)={&(0x7f0000643e60)=@updsa={0xf0, 0x1a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@ipv4={[], [0xff, 0xff], @empty}}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, []}, 0xf0}, 0x1}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f00004e7c1e)="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", 0x16c}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) sendto$inet(r1, &(0x7f0000494000)="17", 0x1, 0x3fffd, &(0x7f0000688ff0)={0x2, 0xffffffffffffffff, @rand_addr}, 0x10) sendmsg$netrom(r1, &(0x7f0000003680)={&(0x7f00000000c0)=@ax25={0x3, {"7b695b27c61bc8"}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000002380)="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", 0x3fa}, {&(0x7f0000003400)="e38305d59a7d42313574fbaaa50fdd710e7330f64916684a39d2955f72ea30f96788af27f48a8f0e1edade6d", 0x2c}, {&(0x7f0000003540)="621551638f440588813f09e545a1e7ff22529481d5dca813e08570267add232e707d80754ce8e9dc59ce842229d26ef2733ab1bdd23cc57e72b2faad162abf54214ea49ffbf285c2240104af28c36abd6c3e1ce220bce2be95fb7b53dff451b85c07fc688e124910c004f74475d91607e11b29ee790330f60c48a707c40d1172", 0x80}], 0x3, &(0x7f0000003640)=[], 0x0, 0x40000}, 0x4000) 2018/02/26 09:25:02 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="dc", 0x1}], 0x1) 2018/02/26 09:25:02 executing program 6: prctl$void(0x20) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000089be95)=@hdr={0x1, 0x0, 0x0, 0x0, 0x0, 0xf09, @eth={@remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "3b47bf", 0xed5, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}}}}}}}}}, 0xf15) [ 44.974236] device eql entered promiscuous mode 2018/02/26 09:25:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000028f000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') pivot_root(&(0x7f00004ceff6)='./control\x00', &(0x7f000052cff0)='./control\x00') rmdir(&(0x7f00002ccff0)='./control/file0\x00') close(r0) 2018/02/26 09:25:02 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) 2018/02/26 09:25:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058cfc8)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f0000797ff0)={&(0x7f0000725000)=@ipv4_newaddr={0x34, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0xbd4c}}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffffffffffff, 0x2ffffffff}, 0xc) r1 = socket(0x200000000010, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000439000)={0x1, &(0x7f000007f000)=[{0x6}]}, 0x10) write(r1, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 2018/02/26 09:25:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa000000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8a6, 0x0, 0x0, 0x0, 0x0, 0x0, "8b2d66126ced5667f17130e1ff3196ad5f09abde14e866f9276a2c10ac65a0994ff74aecd69e8a46f244a32c883f5db7c4554cb99b5be17c90c206fe9b706a93", "f9e5bea889c760707a2eddbf5d8e3fda7868e6254e61b74c31ef256d10c8c41b59cb1f3f4564c7fcab0af08c7bd702e7cab5e36b3225a5f903d2a21f6aba7ec0", "f18f8aeedfe1957bc359c951a1c36566dc3f4d03ba0af8de81db7ad5b644a1ce"}) 2018/02/26 09:25:02 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000646ff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00008d7000)='tmpfs\x00', 0x80001000, 0x0) 2018/02/26 09:25:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000403000)={&(0x7f0000d7efec)={0x14, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0x0, {0x0, 0xffffffffffffffff, @local}}}, 0x2e, &(0x7f0000001400)=[], 0x0, 0x0, 0x111}, 0x0) 2018/02/26 09:25:02 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000054ff3)='/dev/snd/seq\x00', 0x0, 0x101042) dup2(r1, r0) mprotect(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0) write$sndseq(r0, &(0x7f0000019fe4)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000002000)}}], 0x1c) 2018/02/26 09:25:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000aadff1)='/dev/sequencer\x00', 0x0, 0x0) ioctl(r0, 0x5101, &(0x7f000042a000)) 2018/02/26 09:25:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x3f, 0x4) 2018/02/26 09:25:02 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000022dfe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000128000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc351a8c760228f54) 2018/02/26 09:25:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x30, &(0x7f0000001fc4)={0x0, {{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, {{0xa, 0xffffffffffffffff, 0x0, @empty}}}, 0x108) [ 45.100758] audit: type=1400 audit(1519637102.885:20): avc: denied { read } for pid=7681 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 2018/02/26 09:25:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) dup2(r0, r1) sendto$inet6(r0, &(0x7f0000110fde), 0x0, 0x0, &(0x7f0000ff2fe4)={0xa, 0x2, 0x0, @dev={0xfe, 0x80}}, 0x1c) lstat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)) 2018/02/26 09:25:02 executing program 6: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000001fb2)) 2018/02/26 09:25:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f00003bd000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000bbc000)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff}], &(0x7f000000b000)=[0x0]}}}], 0x0, 0x0, &(0x7f0000442000)}) [ 45.183978] binder: 7717:7718 ERROR: BC_REGISTER_LOOPER called without request [ 45.194029] device gre0 entered promiscuous mode [ 45.208794] binder: 7717:7718 got reply with fd, -1, but target does not allow fds 2018/02/26 09:25:03 executing program 0: r0 = socket(0x1000000010, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f78fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f000022b000)={&(0x7f0000e7bff4)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000b3e000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xffffffffffffffff}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), 0x1) 2018/02/26 09:25:03 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_map={0xfffffffffffffffe}}) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x8, 0x4100000) 2018/02/26 09:25:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/26 09:25:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@can={0x1d}, 0x10) 2018/02/26 09:25:03 executing program 6: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000dc7000), 0x10223) 2018/02/26 09:25:03 executing program 4: r0 = memfd_create(&(0x7f0000ee6ff4)='--vboxnet0.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000951000)='/dev/snd/seq\x00', 0x0, 0x200008000020002) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000fbef74)={0x0, 0x0, 0x0, "71756575650000005d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00"}) clock_gettime(0x0, &(0x7f0000000000)={0x0}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={r2}, {}, {}, @control}], 0x30) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x33, @time={r3, r4+10000000}}) 2018/02/26 09:25:03 executing program 2: mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000054d000)='ramfs\x00', 0x0, &(0x7f0000313000)) openat$dir(0xffffffffffffff9c, &(0x7f0000715ff8)='./file0\x00', 0x0, 0x0) unshare(0x20000) accept4$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) unshare(0x20000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200002, 0x0) 2018/02/26 09:25:03 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x41, &(0x7f0000694fef)=""/17, &(0x7f0000dfeffc)=0x19e) [ 45.230107] binder: 7717:7718 transaction failed 29201/-1, size 24-8 line 3232 [ 45.238746] binder: send failed reply for transaction 51 to 7717:7726 [ 45.253033] binder: 7717:7726 ERROR: BC_REGISTER_LOOPER called without request [ 45.262699] binder: undelivered TRANSACTION_ERROR: 29190 [ 45.268159] binder: undelivered TRANSACTION_COMPLETE [ 45.273295] binder: undelivered TRANSACTION_ERROR: 29201 2018/02/26 09:25:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000d37ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00005bbffc)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000b09000)=r1) fcntl$setsig(r0, 0xa, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000e1d000)=0x20) sendto$inet(r0, &(0x7f000017cffd)="03", 0x1, 0x100000004043, &(0x7f0000ee6000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) 2018/02/26 09:25:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x8}) 2018/02/26 09:25:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/26 09:25:03 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000070c000)={0x1, &(0x7f0000f15000)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00004fe000), &(0x7f00005a4ffc)) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x8, 0x4100000) 2018/02/26 09:25:03 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000012ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000013000)={0x2, &(0x7f0000018000)=[{0x80}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f000000d000), 0x0, 0x0, &(0x7f000000dff8)=@abs, 0x8) 2018/02/26 09:25:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x44000002285, &(0x7f000045bfd3)="f8f8ffffffff18ffff0000031dc5d86c814a0083c5e9aed7b6fcc9bfe2d8b3181f16ef7dc14b2caf7e5da4cf07") read(r0, &(0x7f0000000000)=""/36, 0x7) 2018/02/26 09:25:03 executing program 2: getpgid(0x0) 2018/02/26 09:25:03 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000db1ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000a5afd8)={@generic="ecb5d9549ccc258eaef8e9b063d8fed9", @ifru_addrs=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}}) 2018/02/26 09:25:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000007000)={&(0x7f000000a000)={0x10}, 0xc, &(0x7f0000009000)={&(0x7f000000afd4)=ANY=[@ANYBLOB="20000000100021000000000000000000030000000c00020093d34f23f54d4d1b5aa10000000000000000"], 0x1}, 0x1}, 0x0) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x8, 0x4100000) 2018/02/26 09:25:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/26 09:25:03 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10002000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000086d000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00006f2000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags}) bind$packet(r1, &(0x7f00008b6fec)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @empty}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00005c8fe0)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_flags=0x10301}) 2018/02/26 09:25:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x8}) 2018/02/26 09:25:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x77359400}}) 2018/02/26 09:25:03 executing program 6: mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000038fe8)={0xaa}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000261ff0)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:03 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x8, 0x4100000) 2018/02/26 09:25:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x8}) 2018/02/26 09:25:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000030efee)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/02/26 09:25:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 6: r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000951000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x6146, 0x0, {0x0, 0x3, 0x0, 0x0, 0xa00000000000}}) 2018/02/26 09:25:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:25:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x8}) [ 45.550267] device syz0 entered promiscuous mode [ 45.557300] device syz0 left promiscuous mode 2018/02/26 09:25:03 executing program 5: r0 = socket$inet(0x10, 0x2, 0x9) sendto$inet(r0, &(0x7f000000b000)="00000000e80307000700860000020000", 0x10, 0x0, 0x0, 0x0) 2018/02/26 09:25:03 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/26 09:25:03 executing program 7: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000fed)={&(0x7f0000b20000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38fb9d694c5b45f05dc0b08aae7be1ec874e8aff028951efb1d640f1830a3a2a5bc04a0ed1cafcc68537fc07cc467ec24cfa4772105241080b8c1a552d28fc"}, 0x58, &(0x7f0000000000)=[], 0x0, &(0x7f0000000fd0)={0xc}, 0xc}, 0x4000) 2018/02/26 09:25:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r1}) ioctl(r0, 0x44000002285, &(0x7f0000000000)="f8f8ffffffff18ffff0000031dc5d86c814a0083c5e9aed7b6fcc9bfe2d8b3181f16ef7dc14b2caf7e00000007") read(r0, &(0x7f0000000080)=""/36, 0x24) 2018/02/26 09:25:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b"}, 0xc) shutdown(r1, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00000ff000)={0x0, r2}) recvmsg(r4, &(0x7f0000172fc8)={&(0x7f0000b3aff8)=@sco, 0x8, &(0x7f00000a4fb0)=[], 0x0, &(0x7f0000b36000)}, 0x0) dup2(r3, r4) r5 = gettid() tkill(r5, 0x16) 2018/02/26 09:25:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000c15fb0)={@common='tunl0\x00', @ifru_map={0xffffdffffffffff9}}) 2018/02/26 09:25:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x227b, &(0x7f0000d27862)="ff") write$fuse(r0, &(0x7f000012f000)={0x50, 0x0, 0x0, @fuse_init_out={0x7, 0x1a}}, 0x50) read(r0, &(0x7f00005c5fc7)=""/154, 0x9a) 2018/02/26 09:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) 2018/02/26 09:25:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 7: syz_open_dev$random(&(0x7f0000009000)='/dev/random\x00', 0x0, 0x0) epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000030c000)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/02/26 09:25:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000ff1)='setgroups\x00') mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x20000000032, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000ea0000)='\b', 0x1) 2018/02/26 09:25:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:03 executing program 5: readlink(&(0x7f0000007000)='./file0\x00', &(0x7f0000003000)=""/60, 0xfffffffffffffca7) 2018/02/26 09:25:03 executing program 0: rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000006ff9)='status\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/26 09:25:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00007cfff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:25:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f11000)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x20000001, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 2018/02/26 09:25:04 executing program 6: r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000da2000)=""/8, 0x6) 2018/02/26 09:25:04 executing program 2: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000bc2000)) syz_open_dev$tun(&(0x7f00003cd000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket(0x10, 0x802, 0x0) sendto(r0, &(0x7f0000000000)="120000003200e7ff0a00360000000000fd9b", 0x12, 0x0, 0x0, 0x0) 2018/02/26 09:25:04 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/26 09:25:04 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000001300030007fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 2018/02/26 09:25:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f00002e0000)={@dev={0xfe, 0x80}}, 0x1) 2018/02/26 09:25:04 executing program 1: futex(&(0x7f0000002000), 0xb, 0x0, &(0x7f0000000ff8), &(0x7f0000002000), 0x0) 2018/02/26 09:25:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00007cfff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000006ff9)='status\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/26 09:25:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000ccaff7)='/dev/sg#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0xb9d, 'queue0\x00'}) ioctl$int_out(r0, 0x1, &(0x7f0000000080)) 2018/02/26 09:25:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009d8000)='/dev/sequencer2\x00', 0x20002, 0x0) write$sndseq(r0, &(0x7f0000fa5000)=[{0x5b93, 0x0, 0xffffffffffffff80, 0x0, @time, {}, {}, @addr}], 0x30) 2018/02/26 09:25:04 executing program 6: mkdir(&(0x7f0000ed6000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='selinuxfs\x00', 0x0, &(0x7f00000000c0)) 2018/02/26 09:25:04 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000331000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000aadff4)={0x4}) 2018/02/26 09:25:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f000033e000)=[{{}, 0x11, 0x5}], 0x18) 2018/02/26 09:25:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f00007e5fea)="ffcb00000800000010010000f008000000000027", 0x14) 2018/02/26 09:25:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00007cfff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x34}, 0x1}, 0x0) [ 46.240507] tc_dump_action: action bad kind 2018/02/26 09:25:04 executing program 7: r0 = inotify_init1(0x0) r1 = getpgid(0xffffffffffffffff) r2 = getpgid(r1) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000b35000)={0x0, 0x0}) setpgid(0x0, r3) setpgid(0x0, 0x0) 2018/02/26 09:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x24, 0x18, 0x505, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x8, 0x8, "06"}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f00007cfff4)={0x10}, 0xc, &(0x7f00000a6000)={&(0x7f0000009000)=@ipv6_newaddr={0x34, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x204}]}, 0x34}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x50, &(0x7f0000000100)={@generic="bc05480282fc000761f3c5455858ede8", @ifru_addrs=@ipx={0x4, 0x0, 0x0, "753c05238619"}}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200)=0x8) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)) 2018/02/26 09:25:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bd1000)={0x0}) recvfrom$unix(r0, &(0x7f0000ad7000)=""/4096, 0x1000, 0x1, &(0x7f0000b07000)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 09:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x24, 0x18, 0x505, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x8, 0x8, "06"}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="83", 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) 2018/02/26 09:25:04 executing program 7: r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 2018/02/26 09:25:04 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000511fd8)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f000053d000)={@generic="196dc1701ce8009a1da97f1bb45f38b7", @ifru_map={0xd6c}}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/02/26 09:25:04 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, &(0x7f0000027000)={@generic="020000000006000007cf007506b70001", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 2018/02/26 09:25:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000006ff9)='status\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/26 09:25:04 executing program 2: r0 = socket(0x800000010, 0x3, 0x0) write(r0, &(0x7f0000f9b000)="26000000130047f10714c1f9590022ff001000e3010000000000000000000000060010000535", 0x26) 2018/02/26 09:25:04 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f00004b2fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x0) 2018/02/26 09:25:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 2018/02/26 09:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x24, 0x18, 0x505, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x8, 0x8, "06"}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 2: r0 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000006ff8)={0x0, 0x4}, &(0x7f000001b000)=0x8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019fe8)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000ad6000)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000d09f80)="ff010000000000001e0020000100000100000000", 0x14) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000601ef0)={0x0, {{0xa, 0xffffffffffffffff, 0x7fffffff, @loopback={0x0, 0x1}}}, 0x0, 0x0, []}, 0x90) 2018/02/26 09:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00006c1000)=@ipv6_newroute={0x24, 0x18, 0x505, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x8, 0x8, "06"}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 2018/02/26 09:25:04 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000232000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x8, 0x4) sendto$packet(r0, &(0x7f0000002ef0)="990100008d03000000000000001000b80041000000118500cb1b4453184465019206e3ad74cf3a7791029ddd", 0x2c, 0x0, &(0x7f0000d94fec)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}}, 0x14) 2018/02/26 09:25:04 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="83", 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) 2018/02/26 09:25:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000a73000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = gettid() unshare(0x28060400) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) exit(0x0) syz_open_procfs(r0, &(0x7f0000006ff9)='status\x00') sendfile(r1, r1, &(0x7f0000007000), 0x1) 2018/02/26 09:25:04 executing program 4: r0 = add_key$user(&(0x7f0000098ffb)='user\x00', &(0x7f0000354000)={0x73, 0x79, 0x7a}, &(0x7f00005f4f97)="90", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000838fbb)=""/69, 0x45) [ 46.443845] TCP: request_sock_TCPv6: Possible SYN flooding on port 20030. Sending cookies. Check SNMP counters. 2018/02/26 09:25:04 executing program 4: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x3b) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) 2018/02/26 09:25:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa3", 0xe3, 0x0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x2f8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x2f8}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) read(r0, &(0x7f0000002f20)=""/224, 0xe0) 2018/02/26 09:25:04 executing program 4: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x3b) 2018/02/26 09:25:04 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000bdb000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000932000), 0x0, 0x8000, &(0x7f0000874000)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000d06000)='stat\x00') sendfile(r0, r1, 0x0, 0x3ff) 2018/02/26 09:25:04 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="83", 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) 2018/02/26 09:25:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa3", 0xe3, 0x0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x2f8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="39fb0c9671939506203b525c183ccafbedf58b2a7a0ed0ee81f3b8ef25449e4f46bc2b588f9aaaffd05c29981d0ee5c45543ef6ff26ae63ddaea06e49871624aff17e161ce11a02ffa368c317a7129cedc057da92801e6f25ebe89014a61459be89fb3b7bf9c3c36ed251e0b6ceeb8e1388ceb6bf547058606111becd3fbc86be7e164cc89e8c9b640f69d92278286b79ae8b7c7997e4772d9edf4931875eed89f81e01356568bb3ba3455a3cf38a567df6dec382fce76308aae0bd0b8ab2845defd2f2a131d2cc6a0a233a6ce3c8a6008700023d44ed85f8259dadbf9c58b9fd4bf14bc17755b73bdc62929fdc5cb92c514c1ede9d134a9bb653e74aa2f9e22419a3aeda65461d60b7f90faeae8a979ead1da060aee97a0d92fe52562847afe4b6db858cbbe67b2f53b333c9a186f1c76e9897726251dbb2f3a31a034352cd8480483023ec43aad46ec4242e3f976c1e9b41ff5f061a99c1c010c115669d16322f93052266fae54f31a01ee54266a277b27604d9aca20604c3406226d5c0e384b43ac405b5c053002b0cf270ed580f775f860617389c871c7c6154e820b90997ab120455ee07ecc6d4b6d0fd31b2e6e78cebdeb068a12ac5e06ab99b09a9f17a228de0451ab6292730bcf0f6c72075361df44690cd36c3e64266082e2f91df60df1182da7f215ae064936e1dd5f3647be5af09a223e71f11dbee5cd65dbc7af024d5a112a2cd1cc92e144a359cbe14edf6cc4ccca68b6b6a703571f7e53c81b306745667b4a9cbc8cd85978eff4eff6ab358b8b097ed2f254098f0bd40ae87b7d83f1e75796657cc5d9d2f427a626e13e5cb687fd5b0ce9145c16aa218f4fafbcf54b91898667cad86f5e254e2065be59ad24ab60f65e2f48ab0a2732f276b1e3a67fefe845c9f0bc75cd23305320647c3ab29fab419adf1b0994679971207f0f56592e7213b9c2a753f790bfacda6c9ff75a494645d2dd8bf74cb87118b6160e2c857c8843c0ffd17d111788697cd7a48e94d44b563168a48ff7a30a34deee34"]}, 0x2f8}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) 2018/02/26 09:25:04 executing program 4: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x3b) 2018/02/26 09:25:04 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="83", 0x1}], 0x1, 0x0) write(r1, &(0x7f0000335000), 0xfc94) readv(r0, &(0x7f0000119ff0)=[{&(0x7f000061e000)=""/4096, 0xfc74}], 0x3d) 2018/02/26 09:25:04 executing program 7: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000079aff1)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a8c000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000016000)) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) 2018/02/26 09:25:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0x10, &(0x7f0000014000)={&(0x7f0000016edc)={0x10, 0x34, 0x80000000301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 2018/02/26 09:25:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa3", 0xe3, 0x0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x2f8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x2f8}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000033fb0)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596e332f4"}}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x1) 2018/02/26 09:25:04 executing program 4: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x3b) 2018/02/26 09:25:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000f6e000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x4}, 0x1c) 2018/02/26 09:25:04 executing program 7: prctl$void(0xe) 2018/02/26 09:25:04 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000f74000)={0x14, 0xa, 0x20000a, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) 2018/02/26 09:25:04 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000468000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000240ff0)={0x3}) 2018/02/26 09:25:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000d14ffc)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9)="03", 0x1, 0x20000000, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26683cbdc0fbe8132c39f9e0d0e5c320b6a8a6687c654e8383fe3bcd912f5acb925dce98e64ae28c1a6c9273aa3d6f7c1f95e2e98f9d1f31116b1e7e617ee27bba01232240e64fc3150e0153442dc2610b2ccf50d942a6844bc571ccc787a5a93b087a342cc6752178d0bcdf0795d38837d3afa3", 0xe3, 0x0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a79000)={&(0x7f0000821000)={0x10}, 0xc, &(0x7f0000cb4000)={&(0x7f0000764000)={0x2f8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@generic="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"]}, 0x2f8}, 0x1}, 0x0) 2018/02/26 09:25:04 executing program 2: keyctl$join(0x1, 0x0) [ 50.157664] IPVS: Creating netns size=2536 id=9 2018/02/26 09:25:08 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000048ffc)='/selinux/status\x00', 0x0, 0x0) preadv(r0, &(0x7f000052f000)=[{&(0x7f0000194f89)=""/119, 0x77}], 0x1, 0x0) 2018/02/26 09:25:08 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/02/26 09:25:08 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000085ff8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000171000)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000170ff0)) 2018/02/26 09:25:08 executing program 4: renameat2(0xffffffffffffffff, &(0x7f0000852fff)='/', 0xffffffffffffffff, &(0x7f00000f9000)='/', 0x0) 2018/02/26 09:25:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000bf0fc0)={0x0, @time={0x77359400}}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 2018/02/26 09:25:08 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000be7000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xb14, 0x4) connect$inet(r0, &(0x7f0000281ff0)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000e65000)='V', 0x1, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000d56000)="e6", 0x1, 0x0, &(0x7f000072afec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}}, 0x14) 2018/02/26 09:25:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 2018/02/26 09:25:08 executing program 0: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@common='syzkaller1\x00', @ifru_map={0x3}}) r1 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000447fc8)={&(0x7f0000e3b000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x8, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x3d0}, 0x1}, 0x0) 2018/02/26 09:25:08 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002fdb)="240000001a00030007fffd946fa283bc02eee6d87986c497271d856808001000d188737e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:08 executing program 6: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) fcntl$lock(r0, 0x7, &(0x7f0000876000)={0x1}) r1 = gettid() timer_create(0x0, &(0x7f000083afa0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/02/26 09:25:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000471000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000cfe000)) 2018/02/26 09:25:08 executing program 4: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001dfd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) recvmsg(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)=@l2, 0xe, &(0x7f0000000500)=[], 0x0, &(0x7f0000000540)=""/4096, 0x1000}, 0x0) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000000140)=[]}}, {{0x0, 0x0, &(0x7f0000000300)=[], 0x2d0, &(0x7f0000000340)=[]}}], 0x2, 0x0) 2018/02/26 09:25:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000223ff7)='/dev/sg#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000d4d000/0xb000)=nil, 0xb000, 0x0, 0x12, r0, 0x0) 2018/02/26 09:25:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000df7000)) 2018/02/26 09:25:08 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/02/26 09:25:08 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="40eb00", 0x0) lseek(r0, 0x0, 0x3) 2018/02/26 09:25:08 executing program 1: r0 = userfaultfd(0x0) readv(r0, &(0x7f00000001c0)=[], 0x20000000000002a5) 2018/02/26 09:25:08 executing program 4: r0 = memfd_create(&(0x7f0000a83fe5)="3afe39591b194fa808f1d14a28c0f7c26a995d1f73081d1af00a24", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000040)=[{&(0x7f00001f8000)=@abs, 0x8, &(0x7f0000016000)=[], 0x0, &(0x7f0000a15fb0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x92, 0x0) 2018/02/26 09:25:08 executing program 7: stat(&(0x7f0000008ff8)='./file0\x00', &(0x7f0000006fbc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 2018/02/26 09:25:08 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/02/26 09:25:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x3, 0x4) 2018/02/26 09:25:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000e000)=""/84, &(0x7f000000cffc)=0x54) 2018/02/26 09:25:08 executing program 0: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@common='syzkaller1\x00', @ifru_map={0x3}}) r1 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:08 executing program 3: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000ac4000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000e7c000)=0x2, 0x4) 2018/02/26 09:25:08 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000001ffc), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/02/26 09:25:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000d52ffc), 0x4) 2018/02/26 09:25:08 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000000000), 0x0) 2018/02/26 09:25:08 executing program 5: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0xb, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00004f3ff8)={0xffffffffffffffff}, &(0x7f0000a37000), &(0x7f0000685000)={0x77359400}, 0x8) 2018/02/26 09:25:08 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x22) 2018/02/26 09:25:08 executing program 4: pipe(&(0x7f0000000ff8)={0x0}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 2018/02/26 09:25:08 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000336000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000005b000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000169000)) 2018/02/26 09:25:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000da1000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f000085bfd4)={0x14, 0x7, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_lifetime={0x4, 0x6}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:25:08 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f0000000040)=""/86, 0x56) 2018/02/26 09:25:08 executing program 5: r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c8fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) [ 54.469790] IPVS: Creating netns size=2536 id=10 2018/02/26 09:25:12 executing program 7: execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[], &(0x7f0000000540)=[], 0x100) 2018/02/26 09:25:12 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0x42) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:25:12 executing program 0: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@common='syzkaller1\x00', @ifru_map={0x3}}) r1 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:12 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x7fffffff, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0x1c) 2018/02/26 09:25:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:25:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:12 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:12 executing program 5: r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c8fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/26 09:25:12 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3f0, 0x200, 0x200, 0x100, 0x308, 0x308, 0x308, 0x4, &(0x7f000002d000), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372], 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {"73797a30c80100"}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x440) getsockopt(r0, 0x0, 0x40, &(0x7f0000000000)=""/84, &(0x7f0000001ffc)=0x54) 2018/02/26 09:25:12 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x7fffffff, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0x1c) 2018/02/26 09:25:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045431, 0x0) 2018/02/26 09:25:12 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:12 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x7fffffff, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0x1c) 2018/02/26 09:25:12 executing program 0: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@common='syzkaller1\x00', @ifru_map={0x3}}) r1 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r1, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:12 executing program 2: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_fuseblk_mount(&(0x7f00000a6ff8)='./file0\x00', &(0x7f000002d000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:12 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ncpfs\x00', 0x2000, &(0x7f0000000040)='\x00') 2018/02/26 09:25:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:25:12 executing program 5: r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c8fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/26 09:25:13 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008580)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0xc, &(0x7f0000002bc0)=[], 0x0, &(0x7f0000002c00)=""/179, 0xb3}}, {{&(0x7f0000002cc0)=@sco, 0x8, &(0x7f00000040c0)=[{&(0x7f0000003fc0)=""/201, 0xc9}], 0x1, &(0x7f0000004140)=""/237, 0xed}}], 0x2, 0x0, &(0x7f0000008840)={0x0, r2+30000000}) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000002300)=@nl=@kern={0x10}, 0xc, &(0x7f00000045c0)=[{&(0x7f00000035c0)="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", 0xb04}], 0x1}}], 0x1, 0x0) 2018/02/26 09:25:13 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000044fd0)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000051000)}}], 0x30) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x7fffffff, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0x1c) 2018/02/26 09:25:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) shutdown(r0, 0x1) 2018/02/26 09:25:13 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00007f6000)=0x9) 2018/02/26 09:25:13 executing program 2: sched_getscheduler(0x0) 2018/02/26 09:25:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 1: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0xffffffffffffffff, 0xfffffffffffffffc, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd82]}, 0x5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00007cd000)=[{&(0x7f0000fae000)="290000001800310900390001ff0000070200000000000006800000000c000800040002007a0ef4ff01", 0x29}], 0x1) 2018/02/26 09:25:13 executing program 5: r0 = syz_open_dev$tun(&(0x7f00008f9000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00004c8fd8)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f7ff6b6d55cee091d"}) r1 = syz_open_dev$tun(&(0x7f0000864000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00002c3000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="8e11f1052996e56f5ff6b6d564ee091d"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000c1ffb0)={@common='yam0\x00', @ifru_flags=0x400}) close(r0) 2018/02/26 09:25:13 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, &(0x7f0000778ffc)=0x100000001, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000440000), 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @link_local, @common}}, 0x1e, &(0x7f0000000140)=[], 0x0, &(0x7f0000000180)}, 0x40012000) 2018/02/26 09:25:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000003, 0x0, []}) ioctl(r0, 0x8918, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 3: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000ff1)) 2018/02/26 09:25:13 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008580)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0xc, &(0x7f0000002bc0)=[], 0x0, &(0x7f0000002c00)=""/179, 0xb3}}, {{&(0x7f0000002cc0)=@sco, 0x8, &(0x7f00000040c0)=[{&(0x7f0000003fc0)=""/201, 0xc9}], 0x1, &(0x7f0000004140)=""/237, 0xed}}], 0x2, 0x0, &(0x7f0000008840)={0x0, r2+30000000}) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000002300)=@nl=@kern={0x10}, 0xc, &(0x7f00000045c0)=[{&(0x7f00000035c0)="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", 0xb04}], 0x1}}], 0x1, 0x0) 2018/02/26 09:25:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in=@dev={0xac, 0x14}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @rand_addr}}]}, 0xa0}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000d631d9)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b59000)={@generic="d17dff2a2adf5d218b06ceed643a5a00", @ifru_ivalue=0x1}) 2018/02/26 09:25:13 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname$packet(r1, &(0x7f0000c7c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000c37000)=0x14) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000d631d9)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b59000)={@generic="d17dff2a2adf5d218b06ceed643a5a00", @ifru_ivalue=0x1}) 2018/02/26 09:25:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000024f48)=@ipv6_delroute={0x30, 0x19, 0x60d, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@RTA_MULTIPATH={0x14, 0x9, [{0x8}, {}]}]}, 0x30}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f000038b000)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000d6c000)='1', 0x1, r0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:25:13 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00006b2000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000001}, 0x1c) connect$inet(r0, &(0x7f00009a0000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000d631d9)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b59000)={@generic="d17dff2a2adf5d218b06ceed643a5a00", @ifru_ivalue=0x1}) 2018/02/26 09:25:13 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x0, @tick=0x3f, {}, {}, @raw8={"1f60c2cac56958e082a1858d"}}], 0x1c) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000033000)={0x83, @time}) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000d631d9)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000b59000)={@generic="d17dff2a2adf5d218b06ceed643a5a00", @ifru_ivalue=0x1}) 2018/02/26 09:25:13 executing program 1: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ftruncate(r0, 0x10000) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) 2018/02/26 09:25:13 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008580)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0xc, &(0x7f0000002bc0)=[], 0x0, &(0x7f0000002c00)=""/179, 0xb3}}, {{&(0x7f0000002cc0)=@sco, 0x8, &(0x7f00000040c0)=[{&(0x7f0000003fc0)=""/201, 0xc9}], 0x1, &(0x7f0000004140)=""/237, 0xed}}], 0x2, 0x0, &(0x7f0000008840)={0x0, r2+30000000}) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000002300)=@nl=@kern={0x10}, 0xc, &(0x7f00000045c0)=[{&(0x7f00000035c0)="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", 0xb04}], 0x1}}], 0x1, 0x0) 2018/02/26 09:25:13 executing program 0: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000000)={'system_u:object_r:removable_device_t:s0', 0x20, 'system_u:object_r:man_t:s0', 0x20, 0x38, 0x35, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x74) 2018/02/26 09:25:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd1, 0x0, 0x4000000000ef, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040)=[], 0x146) 2018/02/26 09:25:13 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname$packet(r1, &(0x7f0000c7c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000c37000)=0x14) 2018/02/26 09:25:13 executing program 4: prctl$intptr(0x200000002a, 0x0) 2018/02/26 09:25:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) r0 = openat(0xffffffffffffff9c, &(0x7f0000294ff8)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00003e1ff8)='./file0\x00', 0x0) 2018/02/26 09:25:13 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000144000)='/dev/sequencer\x00', 0x1, 0x0) setitimer(0x76a2e6356c27dfdf, &(0x7f00009c3ff0)={{0x0, 0x2710}}, &(0x7f0000643ff0)={{0x0}}) write$sndseq(r0, &(0x7f000079fe50)=[{0x81, 0x1, 0x0, 0x0, @time={r1}, {}, {}, @queue={0xffffffffffffffff}}], 0x390) 2018/02/26 09:25:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000f48fb8)=@hopopts={0x0, 0x3, [], [@calipso={0x7, 0xb8ec862ddfcddd13, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, 0x30) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000bfd000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) 2018/02/26 09:25:13 executing program 4: pipe(&(0x7f0000000ff8)={0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 1: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ftruncate(r0, 0x10000) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) 2018/02/26 09:25:13 executing program 5: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:25:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000031e3e)={0x14, 0x42, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:13 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008580)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0xc, &(0x7f0000002bc0)=[], 0x0, &(0x7f0000002c00)=""/179, 0xb3}}, {{&(0x7f0000002cc0)=@sco, 0x8, &(0x7f00000040c0)=[{&(0x7f0000003fc0)=""/201, 0xc9}], 0x1, &(0x7f0000004140)=""/237, 0xed}}], 0x2, 0x0, &(0x7f0000008840)={0x0, r2+30000000}) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000002300)=@nl=@kern={0x10}, 0xc, &(0x7f00000045c0)=[{&(0x7f00000035c0)="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", 0xb04}], 0x1}}], 0x1, 0x0) 2018/02/26 09:25:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000feaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x541f, &(0x7f0000febff8)) 2018/02/26 09:25:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000031e3e)={0x14, 0x42, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) [ 55.450665] audit: type=1400 audit(1519637113.235:21): avc: denied { validate_trans } for pid=8551 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 2018/02/26 09:25:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000031e3e)={0x14, 0x42, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a44ffc)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/26 09:25:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:13 executing program 5: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:25:13 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeaff6)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d0ff8), 0x8000fffffffe) ioctl$TCFLSH(r1, 0x540b, 0x0) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000a1bff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125d, &(0x7f0000bf7000)) 2018/02/26 09:25:13 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname$packet(r1, &(0x7f0000c7c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000c37000)=0x14) 2018/02/26 09:25:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000025000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028000)={&(0x7f0000031e3e)={0x14, 0x42, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 1: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ftruncate(r0, 0x10000) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) 2018/02/26 09:25:13 executing program 1: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) ftruncate(r0, 0x10000) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) 2018/02/26 09:25:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000f97ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000cadfc8)={0x0, 0x0, &(0x7f00001cd000)=[], 0x0, &(0x7f0000298000)=[{0x10, 0x1, 0x1, '\x00'}], 0x10}, 0x0) recvmsg(r0, &(0x7f0000e6b000)={&(0x7f00000ea000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x14, &(0x7f0000714000)=[], 0x0, &(0x7f00004c0f35)=""/203, 0xcb}, 0x2) 2018/02/26 09:25:13 executing program 5: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:25:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a44ffc)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/26 09:25:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000a1bff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125d, &(0x7f0000bf7000)) 2018/02/26 09:25:13 executing program 6: mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getsockname$packet(r1, &(0x7f0000c7c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000c37000)=0x14) 2018/02/26 09:25:13 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:25:13 executing program 5: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="18", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$unlink(0x9, r1, r0) 2018/02/26 09:25:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a44ffc)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/26 09:25:13 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000010000)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010fdc)="240000002900030007fffd946fa283bc0a00000003000000031d0040791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:13 executing program 3: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 2: nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000a44ffc)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 2018/02/26 09:25:13 executing program 5: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:13 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 2018/02/26 09:25:13 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:25:13 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f000051cff8)=0x5) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000a1bff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125d, &(0x7f0000bf7000)) 2018/02/26 09:25:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in=@dev={0xac, 0x14}}}]}, 0x50}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 5: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) [ 55.756846] device eql entered promiscuous mode 2018/02/26 09:25:13 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:13 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000a1bff5)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x400000000000125d, &(0x7f0000bf7000)) 2018/02/26 09:25:13 executing program 6: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 5: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 4: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f000049e000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000db7000), &(0x7f0000a59000)=0x3) 2018/02/26 09:25:13 executing program 2: nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:13 executing program 0: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000004000/0x1000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/02/26 09:25:13 executing program 6: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 5: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 4: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc4)=[{{&(0x7f0000003000)=@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x1c, &(0x7f0000004fa0)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)=[]}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) ioctl$sock_SIOCOUTQ(r0, 0x80047437, &(0x7f0000001000)) recvfrom$ax25(r0, &(0x7f0000761fdf)=""/33, 0x21, 0x0, &(0x7f00006e8000)={0x3, {"edb3ce5ce22c4e"}}, 0x10) 2018/02/26 09:25:13 executing program 7: clock_getres(0x4edfc63a37f03c38, &(0x7f0000007000)) 2018/02/26 09:25:13 executing program 0: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b29ff8)='./file0\x00', &(0x7f00008f8ff8)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) [ 55.905706] device eql entered promiscuous mode 2018/02/26 09:25:13 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)='/dev/sequencer2\x00', 0x83, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f000056dfff)) 2018/02/26 09:25:13 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000332ff7)='net/arp\x00') sendfile(r0, r1, &(0x7f00009a7000)=0x3a, 0x60) [ 56.025639] device eql entered promiscuous mode 2018/02/26 09:25:13 executing program 6: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x800000, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) r1 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0) readv(r1, &(0x7f0000c33000)=[{&(0x7f0000007000)=""/171, 0x39c9}], 0x1) 2018/02/26 09:25:13 executing program 7: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00003b6fe4)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0xa, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000001c00)=[]}}], 0x40001bd, 0x20000801) 2018/02/26 09:25:13 executing program 2: nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 2018/02/26 09:25:13 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:13 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:13 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x40880, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 2018/02/26 09:25:13 executing program 5: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b28ff8)='./file0\x00', &(0x7f0000766ff8)='./file0\x00', &(0x7f00005a9ff9)='mqueue\x00', 0x8800, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000386000)=""/1840, 0x730) 2018/02/26 09:25:13 executing program 0: r0 = epoll_create1(0x0) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f00006d0000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f00001f8000)=""/129, 0x81, 0x2) 2018/02/26 09:25:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000016e000)='comm\x00') mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$fuse(r0, &(0x7f0000142000)={0x28, 0x0, 0x0, @fuse_notify_delete_out}, 0x28) 2018/02/26 09:25:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') preadv(r0, &(0x7f0000012ff0)=[{&(0x7f0000011fc2)=""/62, 0x1bc}], 0x1, 0x0) [ 56.146120] device eql entered promiscuous mode 2018/02/26 09:25:13 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000064000)={{{@in6=@dev={0xfe, 0x80}, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa4}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in=@dev={0xac, 0x14}}, 0x0, @in=@multicast2=0xe0000002}}, 0xe8) connect$inet6(r0, &(0x7f0000b36000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f00001f8000)=""/129, 0x81, 0x2) 2018/02/26 09:25:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f00001f8000)=""/129, 0x81, 0x2) 2018/02/26 09:25:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000f53000)='net/snmp\x00') pread64(r0, &(0x7f00001f8000)=""/129, 0x81, 0x2) 2018/02/26 09:25:14 executing program 6: r0 = socket(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 56.228782] binder_alloc: 8733: binder_alloc_buf, no vma [ 56.236987] binder: 8733:8738 transaction failed 29189/-3, size 0-245 line 3127 [ 56.265611] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.273449] device eql entered promiscuous mode 2018/02/26 09:25:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) unshare(0x400) shutdown(r0, 0x0) 2018/02/26 09:25:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) close(r0) 2018/02/26 09:25:14 executing program 2: nanosleep(&(0x7f0000d1e000)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 2018/02/26 09:25:14 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:14 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000466000)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000d89000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r1, &(0x7f000074e7f2)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}, 0x2e) 2018/02/26 09:25:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f000093cfc7)="390000001100094701bb61e1c30500ff070000000200000045efffff08009b001901000000000000850001070000000504e9ff0006000d0005", 0x39}], 0x1) 2018/02/26 09:25:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) unshare(0x400) shutdown(r0, 0x0) [ 56.381262] binder_alloc: 8757: binder_alloc_buf, no vma [ 56.391955] binder: BINDER_SET_CONTEXT_MGR already set [ 56.391962] binder: 8755:8765 ioctl 40046207 0 returned -16 [ 56.398042] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:25:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) unshare(0x400) shutdown(r0, 0x0) 2018/02/26 09:25:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) unshare(0x400) shutdown(r0, 0x0) 2018/02/26 09:25:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 56.398050] binder: 8756:8766 ioctl 40046207 0 returned -16 [ 56.411745] device eql entered promiscuous mode [ 56.412255] device eql entered promiscuous mode [ 56.471200] binder_alloc: 8757: binder_alloc_buf, no vma 2018/02/26 09:25:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x20000000000f) bind$netlink(r0, &(0x7f0000d25ff4)={0x10, 0x0, 0x0, 0xa6e}, 0xc) bind$netlink(r0, &(0x7f0000436ff4)={0x10, 0x0, 0x0}, 0xc) [ 56.471206] binder: 8757:8759 transaction failed 29189/-3, size 0-245 line 3127 [ 56.475418] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.497634] binder_alloc: 8757: binder_alloc_buf, no vma [ 56.498422] binder_alloc: 8780: binder_alloc_buf, no vma [ 56.498438] binder: 8780:8781 transaction failed 29189/-3, size 0-245 line 3127 2018/02/26 09:25:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 6: mprotect(&(0x7f0000375000/0xc00000)=nil, 0xc00000, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000f18000)) 2018/02/26 09:25:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000a, &(0x7f0000cd6000), 0xffffffffffffff13) [ 56.503773] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.520960] binder: 8755:8765 transaction failed 29189/-3, size 0-245 line 3127 [ 56.523335] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.525497] binder_alloc: 8783: binder_alloc_buf, no vma [ 56.525514] binder: 8783:8785 transaction failed 29189/-3, size 0-245 line 3127 [ 56.527458] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 6: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000ba8000)) 2018/02/26 09:25:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) [ 56.573519] binder_alloc: 8786: binder_alloc_buf, no vma [ 56.573537] binder: 8786:8789 transaction failed 29189/-3, size 0-245 line 3127 [ 56.577366] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.596240] binder: 8756:8766 transaction failed 29189/-3, size 0-245 line 3127 [ 56.607860] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.622386] binder_alloc: 8797: binder_alloc_buf, no vma 2018/02/26 09:25:14 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x82600, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00008db000)={0x0, 0xffffffffffffffff, @dev}, &(0x7f000056affc)=0x1, 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_netrom_SIOCGSTAMP(r2, 0x8906, &(0x7f0000d6e000)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000871ffc)={0x1}, 0x40a) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000038ff8)='./file0\x00', &(0x7f0000022000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000038000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e6f000)={0xa, 0x2, 0x1000000000000, @empty, 0x5}, 0x42) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) [ 56.630819] binder: BINDER_SET_CONTEXT_MGR already set [ 56.630827] binder: 8798:8801 ioctl 40046207 0 returned -16 [ 56.643630] binder_alloc: 8797: binder_alloc_buf, no vma [ 56.649197] binder: 8798:8801 transaction failed 29189/-3, size 0-245 line 3127 [ 56.658434] binder: 8797:8800 transaction failed 29189/-3, size 0-245 line 3127 2018/02/26 09:25:14 executing program 4: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x32}, 0x0, @in6=@empty, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x22100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) getsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000100)=""/119, &(0x7f0000000180)=0x77) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x141101, 0x0) r3 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="9c9f7afe7e56dab9b8fdda815acdc04af6b400ba5a23a7d2832f6ec0a86f72f426cc4ba68928e2383e0209e9212c0510d8c0321264dda527e0debe05d44095de9031989cf7688a52e53696d93e6ce639e425", 0x52, 0xfffffffffffffffa) add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)="e70a276c82cfb0328432054dc3669b6a1723219d6aede50424fb9aea4b936a9e372e861200fb713f45591d47e2e65da54c35c5ff6e39e1a716cb0d69f0ff4b59ece94a88b434f2c1456f3368c3c8766a5b8de119e9a8d86f6b3aaf4801aab3798134632b992ff5b04a3309a5b308e2ef25", 0x71, r3) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r3, r4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='security.capability\x00') 2018/02/26 09:25:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fbdff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00005e8ffc), &(0x7f0000ea2000)=0x4) 2018/02/26 09:25:14 executing program 6: rt_sigaction(0x7, &(0x7f0000e21fe0)={0x20a4d710}, &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00002dd000)='comm\x00') 2018/02/26 09:25:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002000)='/dev/sg#\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003ff5)=[{&(0x7f0000003f2a)="58a3a1d5e5d0731e2281ca3b9ce7ac1231236c4044d09b5c0c935f28e6abbaf388fce66ae11a2c555e53f88ca3dee9532c35236e45462e5b1c0fa489e92cfc255721751e91bdbfa240ffa3bd8481ce00a4531660e1e32fbf3447ac7a96b52b996e07c26d1ff236febc4b8854cd80218bf7d4d8317c433f0c39049d055f1c00624dce0a58a695", 0x86}], 0x1, 0x0) ioctl(r0, 0x227b, &(0x7f0000001000)="06") read(r0, &(0x7f0000003fa8)=""/88, 0x58) 2018/02/26 09:25:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f000000aff0)={0x2, 0x1, @broadcast=0xffffffff}, 0x10) connect$inet(r1, &(0x7f0000009ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000005000)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10, &(0x7f0000011000)=[{&(0x7f000000ef51)="f5", 0x1}], 0x1, &(0x7f000000d000)=[]}, 0x0) recvmsg(r1, &(0x7f0000004fc8)={&(0x7f000000d000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000014fd0)=[{&(0x7f0000006000)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 2018/02/26 09:25:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:25:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42040) close(r0) socket$key(0xf, 0x3, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00004acffc), 0x4) close(r0) 2018/02/26 09:25:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00007f5000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x0, []}, 0x10) [ 56.666002] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.687033] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:14 executing program 0: sched_getaffinity(0x0, 0x0, &(0x7f000021c000)) 2018/02/26 09:25:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fbdff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00005e8ffc), &(0x7f0000ea2000)=0x4) 2018/02/26 09:25:14 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x23a, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0xfd9c}], 0x1, 0x0) close(r0) 2018/02/26 09:25:14 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f0000000000)="805d958bca19ef5f839c2d988e80163d294835b196955ff8cc24b7c09680a604f087ba63f9a5018cf9d541c7ef58e4a80210456641960cf37a14533fa28f808f47a654d6", 0x44}], 0x1, &(0x7f0000005000)=[]}, 0xc100) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000100)=@nfc, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000240)=""/50, 0x32}], 0x2, &(0x7f0000000380)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f000000c000)="bc", 0x1}], 0x1, &(0x7f000000ae80)=[]}, 0x0) 2018/02/26 09:25:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fbdff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00005e8ffc), &(0x7f0000ea2000)=0x4) 2018/02/26 09:25:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendfile64(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 2018/02/26 09:25:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000fbdff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00005e8ffc), &(0x7f0000ea2000)=0x4) 2018/02/26 09:25:14 executing program 7: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000433ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000a5afd8)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000062ffe0)={@common='gre0\x00', @ifru_flags=0x301}) [ 56.737228] binder_alloc: 8807: binder_alloc_buf, no vma [ 56.745922] binder: 8807:8810 transaction failed 29189/-3, size 0-245 line 3127 [ 56.770231] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.783726] binder: release 8835:8839 transaction 71 out, still active [ 56.793094] binder: undelivered TRANSACTION_COMPLETE [ 56.799216] binder: BINDER_SET_CONTEXT_MGR already set [ 56.810731] binder: 8835:8845 ioctl 40046207 0 returned -16 [ 56.811424] device gre0 entered promiscuous mode [ 56.822354] binder_alloc: 8835: binder_alloc_buf, no vma [ 56.822372] binder: 8835:8839 transaction failed 29189/-3, size 40-0 line 3127 [ 56.844573] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.850335] binder: send failed reply for transaction 71, target dead 2018/02/26 09:25:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42040) close(r0) socket$key(0xf, 0x3, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00004acffc), 0x4) close(r0) 2018/02/26 09:25:14 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) 2018/02/26 09:25:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000ceffd4)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/26 09:25:14 executing program 2: r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0xffffffffffffffff}, 0x4) 2018/02/26 09:25:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:25:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/217, 0xd9}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/69, 0x45}], 0x5, &(0x7f0000001300)=""/137, 0x89}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2018/02/26 09:25:14 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000878000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000f38000)={{0x9}}) 2018/02/26 09:25:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000dd6ff7)='loginuid\x00') write(r0, &(0x7f0000ecef3c), 0x0) 2018/02/26 09:25:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000366000)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f000077a000), 0x0, 0x800000020000000, &(0x7f0000aa8ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000e32000)=""/116, 0x74, 0x100, &(0x7f0000018ff0)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind$inet(r1, &(0x7f0000899000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000afb000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000c91000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f000080eff4)={r3, 0x80000, r1}) r5 = socket$netlink(0x10, 0x3, 0x14) recvfrom$inet(r1, &(0x7f0000aab5df)=""/128, 0x80, 0x40000102, &(0x7f0000835ff0)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000041ff0)={0xffffffffffffffa1, 0x0, 0x100, 0x5}) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000ff1000)=""/182, &(0x7f0000350ffc)=0xb6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f000097fff8)={0x6, 0x7fffffff}, 0x8) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000212fea)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00009bf000)={0x4, 0x2}) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000385ff8)={0x0, 0x9}, &(0x7f000080d000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000ebbf74)={r7, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}}, 0x8c) writev(r1, &(0x7f0000a77000)=[{&(0x7f0000bc7f9a)='1', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000963fec)={0x7, 0xffff, 0x8, 0x40, 0x5}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000c31000), 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f000040a000), &(0x7f000085f000)=0x8) writev(r1, &(0x7f00000ae000)=[{&(0x7f000059a000)="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", 0x218}], 0x1) [ 57.160879] audit: type=1400 audit(1519637114.945:22): avc: denied { create } for pid=8949 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 2018/02/26 09:25:15 executing program 7: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000d40ff4)) 2018/02/26 09:25:15 executing program 6: setitimer(0x0, &(0x7f0000a0b000)={{}, {0x0, 0x7530}}, &(0x7f0000cd5000)) alarm(0x0) 2018/02/26 09:25:15 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000031ff1)='/dev/sequencer\x00', 0x401, 0x0) write$tun(r0, &(0x7f0000031000)=@pi={0x0, 0x0, @ipv6={0x0, 0x6, "a67870", 0x10, 0x0, 0x0, @empty, @mcast1={0xff, 0x1, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}, 0x3c) 2018/02/26 09:25:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000ceffd4)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/26 09:25:15 executing program 2: r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0xffffffffffffffff}, 0x4) 2018/02/26 09:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000366000)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f000077a000), 0x0, 0x800000020000000, &(0x7f0000aa8ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000e32000)=""/116, 0x74, 0x100, &(0x7f0000018ff0)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind$inet(r1, &(0x7f0000899000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000afb000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000c91000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f000080eff4)={r3, 0x80000, r1}) r5 = socket$netlink(0x10, 0x3, 0x14) recvfrom$inet(r1, &(0x7f0000aab5df)=""/128, 0x80, 0x40000102, &(0x7f0000835ff0)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000041ff0)={0xffffffffffffffa1, 0x0, 0x100, 0x5}) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000ff1000)=""/182, &(0x7f0000350ffc)=0xb6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f000097fff8)={0x6, 0x7fffffff}, 0x8) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000212fea)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00009bf000)={0x4, 0x2}) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000385ff8)={0x0, 0x9}, &(0x7f000080d000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000ebbf74)={r7, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}}, 0x8c) writev(r1, &(0x7f0000a77000)=[{&(0x7f0000bc7f9a)='1', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000963fec)={0x7, 0xffff, 0x8, 0x40, 0x5}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000c31000), 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f000040a000), &(0x7f000085f000)=0x8) writev(r1, &(0x7f00000ae000)=[{&(0x7f000059a000)="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", 0x218}], 0x1) 2018/02/26 09:25:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42040) close(r0) socket$key(0xf, 0x3, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00004acffc), 0x4) close(r0) 2018/02/26 09:25:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfffffffffffffec1, 0x20000801, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00004a4000)) 2018/02/26 09:25:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000186ff4)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x18, 0x12, 0x10000000101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, []}, 0x18}, 0x1}, 0x0) 2018/02/26 09:25:15 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x0, 0x0, 0x80}, 0x20) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000ceffd4)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/26 09:25:15 executing program 0: r0 = socket(0xa, 0x80001, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001ffc), &(0x7f0000000ffc)=0x4) 2018/02/26 09:25:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00001caff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x0) 2018/02/26 09:25:15 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x2, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00009abffc)=0x8, 0x4) bind$inet(r1, &(0x7f0000afbff0)={0x2, 0x2, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000001ff0)=[{0x20, 0x0, 0x0, 0xfffffffffffff028}, {0x6}]}, 0x10) sendto(r1, &(0x7f0000016000), 0x0, 0x0, &(0x7f0000013000)=@rc={0x1f}, 0x9) 2018/02/26 09:25:15 executing program 2: r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0xffffffffffffffff}, 0x4) [ 57.276164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 2018/02/26 09:25:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000e5dff7)={@empty}, 0x14) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000ceffd4)=""/44, 0x2c) getdents(r0, &(0x7f0000cdb000)=""/36, 0x24) 2018/02/26 09:25:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000ffc), 0x4) 2018/02/26 09:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000366000)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f000077a000), 0x0, 0x800000020000000, &(0x7f0000aa8ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000e32000)=""/116, 0x74, 0x100, &(0x7f0000018ff0)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind$inet(r1, &(0x7f0000899000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000afb000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000c91000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f000080eff4)={r3, 0x80000, r1}) r5 = socket$netlink(0x10, 0x3, 0x14) recvfrom$inet(r1, &(0x7f0000aab5df)=""/128, 0x80, 0x40000102, &(0x7f0000835ff0)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000041ff0)={0xffffffffffffffa1, 0x0, 0x100, 0x5}) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000ff1000)=""/182, &(0x7f0000350ffc)=0xb6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f000097fff8)={0x6, 0x7fffffff}, 0x8) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000212fea)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00009bf000)={0x4, 0x2}) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000385ff8)={0x0, 0x9}, &(0x7f000080d000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000ebbf74)={r7, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}}, 0x8c) writev(r1, &(0x7f0000a77000)=[{&(0x7f0000bc7f9a)='1', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000963fec)={0x7, 0xffff, 0x8, 0x40, 0x5}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000c31000), 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f000040a000), &(0x7f000085f000)=0x8) writev(r1, &(0x7f00000ae000)=[{&(0x7f000059a000)="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", 0x218}], 0x1) 2018/02/26 09:25:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000000040)="290000002000190700003fffffffda060200000605000000040000140d0004000000000000d200019c", 0x29}], 0x1) 2018/02/26 09:25:15 executing program 0: r0 = userfaultfd(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={{{{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, {{0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x5, 0x40, 0x0, "f63eb06cf2ef30a787ed9fb0eaaef412df315f9b8290677b4ad6ab9261c5284bd338962531e1526502c6f416b2840e7ffa59ebba56d111f95829cdda1d9653a9843476d7f3cfca99ce6b66c90e33c9e9"}, 0x160) memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="3867e75b4c1ded6ab8670d44db10f85493e60f7c542da94c0ed5584e56af64265de80810dff73e234bef1695152b45e9bf6e9cf8c664c73b66d31f6431b2eb6ba85e0852d197b6e83e6e329d55599171fd41aa0211a616db3cc886feb78f5c316233f6fb45448a449e0a438eaa3ceace74032442ef9a5de55e8d79194b82a702e7037e46c135782da37dcf717dfeda4ccbceea6eaace15b2f06c06cb99ff76", 0x9f}, {&(0x7f0000000340)="bc", 0x1}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x64, "ebba540406d1f55187ff011440a58281f18caa3a3484383550f08617cfa705a4821e1a576f0ac6a46d990120267a9dab3b33b004f86bcb74c06fb58d84785a46eeb1dbe9acde497762bc88171257c49f7ebaa714c0777ba0dc3eda6896520316018ccb22"}, &(0x7f00000004c0)=0x6c) recvfrom(r1, &(0x7f00000000c0)=""/88, 0x58, 0x0, &(0x7f0000000140)=@ax25={0x3, {"2b61e9e097e9bd"}}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="b70832905003d7797e3409758cd6", &(0x7f0000000040)}}, &(0x7f00000001c0)) 2018/02/26 09:25:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x42040) close(r0) socket$key(0xf, 0x3, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00004acffc), 0x4) close(r0) 2018/02/26 09:25:15 executing program 2: r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0xffffffffffffffff}, 0x4) 2018/02/26 09:25:15 executing program 1: timer_create(0xffbffffffffffff3, &(0x7f00000a3000)={0x0, 0x3d, 0x0, @thr={&(0x7f0000861000), &(0x7f00009ad000)}}, &(0x7f0000852000)) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f000081fff3)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) 2018/02/26 09:25:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b27000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000054fb0)={{0x0, 0x1}}) 2018/02/26 09:25:15 executing program 6: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008a1ff7)='syscall\x00') sendfile(r0, r0, &(0x7f00001f0000), 0x40) [ 57.478625] audit: type=1400 audit(1519637115.265:23): avc: denied { net_admin } for pid=3878 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 57.542627] audit: type=1400 audit(1519637115.335:24): avc: denied { net_admin } for pid=3868 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 57.549348] audit: type=1400 audit(1519637115.335:25): avc: denied { create } for pid=9009 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 57.550787] audit: type=1400 audit(1519637115.335:26): avc: denied { dac_override } for pid=9031 comm="syz-executor1" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:25:15 executing program 0: r0 = userfaultfd(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={{{{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, {{0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x5, 0x40, 0x0, "f63eb06cf2ef30a787ed9fb0eaaef412df315f9b8290677b4ad6ab9261c5284bd338962531e1526502c6f416b2840e7ffa59ebba56d111f95829cdda1d9653a9843476d7f3cfca99ce6b66c90e33c9e9"}, 0x160) memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="3867e75b4c1ded6ab8670d44db10f85493e60f7c542da94c0ed5584e56af64265de80810dff73e234bef1695152b45e9bf6e9cf8c664c73b66d31f6431b2eb6ba85e0852d197b6e83e6e329d55599171fd41aa0211a616db3cc886feb78f5c316233f6fb45448a449e0a438eaa3ceace74032442ef9a5de55e8d79194b82a702e7037e46c135782da37dcf717dfeda4ccbceea6eaace15b2f06c06cb99ff76", 0x9f}, {&(0x7f0000000340)="bc", 0x1}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x64, "ebba540406d1f55187ff011440a58281f18caa3a3484383550f08617cfa705a4821e1a576f0ac6a46d990120267a9dab3b33b004f86bcb74c06fb58d84785a46eeb1dbe9acde497762bc88171257c49f7ebaa714c0777ba0dc3eda6896520316018ccb22"}, &(0x7f00000004c0)=0x6c) recvfrom(r1, &(0x7f00000000c0)=""/88, 0x58, 0x0, &(0x7f0000000140)=@ax25={0x3, {"2b61e9e097e9bd"}}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="b70832905003d7797e3409758cd6", &(0x7f0000000040)}}, &(0x7f00000001c0)) 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 5: mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000fd5fd8)={@common='lo\x00', &(0x7f0000938ffb)=@ethtool_gfeatures={0x3a, 0x0, []}}) 2018/02/26 09:25:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000012a000)=[{&(0x7f0000e73d64)="290000002000190700003fffffffda060200000622e80002040000140d00041000000001000000019c", 0x29}], 0x1) 2018/02/26 09:25:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)) 2018/02/26 09:25:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000366000)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000490000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f000077a000), 0x0, 0x800000020000000, &(0x7f0000aa8ff0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000e32000)=""/116, 0x74, 0x100, &(0x7f0000018ff0)={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x10) bind$inet(r1, &(0x7f0000899000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000afb000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000c91000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f000080eff4)={r3, 0x80000, r1}) r5 = socket$netlink(0x10, 0x3, 0x14) recvfrom$inet(r1, &(0x7f0000aab5df)=""/128, 0x80, 0x40000102, &(0x7f0000835ff0)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000041ff0)={0xffffffffffffffa1, 0x0, 0x100, 0x5}) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000ff1000)=""/182, &(0x7f0000350ffc)=0xb6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f000097fff8)={0x6, 0x7fffffff}, 0x8) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000212fea)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f00009bf000)={0x4, 0x2}) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000385ff8)={0x0, 0x9}, &(0x7f000080d000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000ebbf74)={r7, @in6={{0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}, 0x1}}}, 0x8c) writev(r1, &(0x7f0000a77000)=[{&(0x7f0000bc7f9a)='1', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000963fec)={0x7, 0xffff, 0x8, 0x40, 0x5}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000c31000), 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f000040a000), &(0x7f000085f000)=0x8) writev(r1, &(0x7f00000ae000)=[{&(0x7f000059a000)="1b535ea19371228fb35cd6affe75fd508703a6520c0c3bcedded24701762dcc7bd2249cb28f40bca747076580104c7a930147cc14fa98c7da7b4cb5d0268cb4a2a3629923bccfc95f3f7e1016b77eec330ccf3264824dc1c2826635d6a37badd2fabc8477acd6797c2201ea3aa10c1bcf72a92d3a2333701e8a4effd28eecfa504af9e19c8e3ef6aa3e7ac50c17b032f86ef3a0c87345f5fe88fc592e2d1ac32864512bbfd1b1326a3b5e1f5ed1e72246769050f193ad8659973ed8dd9123f155eea421d8149f28ab27abfbde3f963652160d6ea89e836c86a7277606813e3a9e42f9e40f321721b306e1a75ed6c45577bff2accf6fc33963f410eff6d15a7382a872f528f85adf2d14cf962028c5285229a189a2b445743940460e50a9b4925259a215b00f2d982fc859b28376fce505edf8fd5a281481731f70c66d6728aac1269a29a909a9ec1da8408725491215a574c1b24a3da493c8795cf6b29033e866b264c096952c275c0b6a284c450e2c1bd8df370d54245af1471b63be7b523a91787ac0f976b341161e39782ce739591217ab409831a7946ad8591a7eb45f22cdd034ace3cb2c072d9c39c908cef10d98ff7e9dd7a5bf7fbe4da21006a0d68a81a4bc1bb03a12952665db6d5689c6ffbb3b059b2b63dfcac390441afb9e0f936fbeebbf3b6e07de0e52b48622b8e99a2d620ed7f8ecfb67c51c474a8a3910f6a6c3bd197db07f93b8fd27bd9478020296dc1d5ed3c077781", 0x218}], 0x1) 2018/02/26 09:25:15 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x23, 0x0, 0x0) 2018/02/26 09:25:15 executing program 6: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014dfc8)={&(0x7f000059cff4)={0x10}, 0xc, &(0x7f0000397000)={&(0x7f0000cd9000)=@updpolicy={0xb8, 0x19, 0x401, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@broadcast=0xffffffff, @in=@dev={0xac, 0x14}}}, []}, 0xb8}, 0x1}, 0x0) 2018/02/26 09:25:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000000)=[], 0x0, &(0x7f0000000000)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0xffffffffffffffff, @rand_addr}, 0x10, &(0x7f0000000080)=[], 0x0, &(0x7f0000000040)=[]}}], 0x2, 0x0) 2018/02/26 09:25:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000159fea)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/02/26 09:25:15 executing program 7: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) msync(&(0x7f00003f6000/0x4000)=nil, 0x4000, 0x4) 2018/02/26 09:25:15 executing program 7: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) msync(&(0x7f00003f6000/0x4000)=nil, 0x4000, 0x4) [ 57.730229] audit: type=1400 audit(1519637115.515:27): avc: denied { net_admin } for pid=9048 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:25:15 executing program 7: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) msync(&(0x7f00003f6000/0x4000)=nil, 0x4000, 0x4) [ 57.771839] audit: type=1400 audit(1519637115.565:28): avc: denied { create } for pid=9045 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 2018/02/26 09:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @empty}}, @sadb_address={0x3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}}]}, 0x88}, 0x1}, 0x0) 2018/02/26 09:25:15 executing program 7: mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) msync(&(0x7f00003f6000/0x4000)=nil, 0x4000, 0x4) 2018/02/26 09:25:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)) 2018/02/26 09:25:15 executing program 6: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000526000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000734000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000a96fff)=""/1, &(0x7f00002a1000)=0x25) 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 0: r0 = userfaultfd(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={{{{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, {{0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x5, 0x40, 0x0, "f63eb06cf2ef30a787ed9fb0eaaef412df315f9b8290677b4ad6ab9261c5284bd338962531e1526502c6f416b2840e7ffa59ebba56d111f95829cdda1d9653a9843476d7f3cfca99ce6b66c90e33c9e9"}, 0x160) memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="3867e75b4c1ded6ab8670d44db10f85493e60f7c542da94c0ed5584e56af64265de80810dff73e234bef1695152b45e9bf6e9cf8c664c73b66d31f6431b2eb6ba85e0852d197b6e83e6e329d55599171fd41aa0211a616db3cc886feb78f5c316233f6fb45448a449e0a438eaa3ceace74032442ef9a5de55e8d79194b82a702e7037e46c135782da37dcf717dfeda4ccbceea6eaace15b2f06c06cb99ff76", 0x9f}, {&(0x7f0000000340)="bc", 0x1}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x64, "ebba540406d1f55187ff011440a58281f18caa3a3484383550f08617cfa705a4821e1a576f0ac6a46d990120267a9dab3b33b004f86bcb74c06fb58d84785a46eeb1dbe9acde497762bc88171257c49f7ebaa714c0777ba0dc3eda6896520316018ccb22"}, &(0x7f00000004c0)=0x6c) recvfrom(r1, &(0x7f00000000c0)=""/88, 0x58, 0x0, &(0x7f0000000140)=@ax25={0x3, {"2b61e9e097e9bd"}}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="b70832905003d7797e3409758cd6", &(0x7f0000000040)}}, &(0x7f00000001c0)) 2018/02/26 09:25:15 executing program 3: clock_gettime(0x0, &(0x7f0000a61ff0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000c66ff8)={0x0, r0}, &(0x7f0000ce2000)) timer_create(0x2, &(0x7f0000eca000)={0x0, 0x11, 0x0, @thr={&(0x7f00009da000), &(0x7f00004fbff5)}}, &(0x7f000050a4ac)) timer_settime(0x0, 0x0, &(0x7f0000678ff0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000105ff0)) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:15 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/13) 2018/02/26 09:25:15 executing program 6: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="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", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)) 2018/02/26 09:25:15 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x0) mount(&(0x7f0000ceb000)='./file0/file0\x00', &(0x7f00007fb000)='./file0\x00', &(0x7f00002a8ffa)='btrfs\x00', 0x0, &(0x7f0000d1cfff)) [ 57.888028] audit: type=1400 audit(1519637115.675:29): avc: denied { net_admin } for pid=3866 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xdfe000)=nil, 0xdfe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000dedffc)=0x2, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000527000)={@common='tunl0\x00', @ifru_flags=0x4000}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}}}) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0xb, 0xfd89) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000df7000)={0x0, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f00006fb000)=0x1c, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000dfaffc)) ioperm(0x20, 0x3, 0x5) r2 = creat(&(0x7f000099bff8)='./file0\x00', 0x10) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000673fe8)={0x3, 0x81, 0x5, 0x8, 0x3, 0x81}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000cddfb7)=""/140, &(0x7f0000dfb000)=0x9ef83d817776b5c2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000020f000)={0x0, 0x8c, "bb1f3e1a5f4aa58504efbe6479b44542e760056906cfc7737ab2ddaba97ba566846fe3690a7c371f485fa5e153cd9eb36ddeaa107c1fb8affea6e9707f63111e4b80f7815a01ab8987d137cdb611184abd672bdee4d676c182d964786ceac528b685b43f0ccd95ff6908563a6fc1df9d856ed84edb90d172ccf224011d46e85d7310558c3e2b620f4eba9748"}, &(0x7f000058fffc)=0x94) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000df7000)={r3, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000b0c000)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd954b88dbb2d29464931bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f7806d7d76cdf489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d43bcb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac1099244e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63d0bff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652a171f0269bdcd98291410c010cc377d2690a6032fe5701117adbd0f6b847c9617a9b3d20529024d8d9749b9c49827694d346d3b1bbe434122331986b9f6e84430dfd75d123f3e307d6f5514f3da09b527408bfb6816da54beeefad160e4b095517f3292c2e17fb3bba47527671d0afe7c35d54d25ab307b15d069a05395a9cddd4b519224fe3c689d14827ede6d91ebace2a80afaad3dcd1f8ce20e92012b8934d7ff3ebdd285cc24202a86d70b96674a6af05a3c29065afa4e38b9c34006cb3eb9c87985cfc511a8c261cdeb0c7a3c7a682c40c5b9f1d7d5ef6f97e32d02fdd3f2ded413f4a36c4db899b96c8e40d91c2743cd1d435013e3c3431c82fc5b3345b66cce79fa49f10baa4ef28535eee8c5c1a4b38bace2fb14ec11d34d620b1cc2396dc1fa857ac6ac9f5689b5935f2f25184edd40f8f5c70714f941beae3e1bc9af757edd9d68fb24218e2a02aad4dc0b3c2e5ff94ce547f358f38e52673473fd0e57497978324aee16559e9cdbe5b3a0b96dd69fe5bc97e644487274b6158a0412bd60172bb66f774b8eae7bc1f52ed64d44c553bdc26823e35f18683554e7359802173d1fa86a66104abb1977c3e9fa6970ed7ee483b14b65673a81786fe0ed301f8edb0669fd25bfa0d565e3e93b19b8572c98dbacb103053527a95ee758be002e13df756bbc486def0db079124db72fadc26f0a26b42e21f260f902bb4cd881baae57eff1c3cc15063be17e48208b9a69622adfc03991d204fe0f5ae2528b22c7743f97e0669a1c3c0d0d90f39846fd954d681be0265d14b12285fb1b20bcbaa95915ad51ab8f84094674cbac0071021b261c39a46b0177b98f1662100ef31a3e981236d51e6c1429144a89d46b149301873ef99959f8ab15c12309620d5d548b62ff92233a3f200e0d0a9c2122be615dd91e6a6cd89290d24895540635fead9a56f481ee3fd7890852e271fa7c37b1836a3e1764574960e1ab9fda1d25693cfc33defea84f65c08cce479c66dc16b28d453a1b717fdd9f6ff46b1fa1b6866b4a8c1ad53439c5958403953b3a844b660b28b11d427b392a7c710edbf25725a65e6b94e4c64ae458a8c97c9f7a05a7d8ebf6c76e3afc0204ced97be84986da5403ef31eff1790c039fe00a89976ccab7638d2e217fc64609a41f3a008ed78b25d1a9420b782deef6ce2db0c6d427580087b69c75c1357ed2908c32cffee1c6ddd08510562ab015507a4eb4f54ae5c097cdca34f521f9fa8df7667645a696a472650c1ca9c035e95f34db54722897159c31dc6be5693a5f3871ccbb48a7ead233d03b76875590fa20bae4f37a2011622d0203a3e9d9e198cb075aba26f5e78a8f0b0cd27052527daf0f8e77858dbddec7038c198b868e93ae32f1745d166afed4129460e07af8cb6c3debb6503e87f3cb309e39ed3d682d24adec48ea22702c4d8d48386977a89b73e585f8c2c5fcb0a693cd5028a601b04b833a41ec705735c767c70d316b60aba2da24bd6523533f3180accade90f47e412b393ee1d2456cf8bb430289ddb824350764985c5e35f738f830a378bfa65fd167c7307c13acb912beefa69e499d4a750e820a7af08a7c204ffb64e09fcc921a4e79999757d608880bfd52255bbc16369af4f779edfd9439cfcd17fcc02d5aaa81bac66fa2e551cef55779bd90e8be587ee698575918fced59ec652af26718b3afd1471379132ba0b5143a78f84605b1ef51e49e820a8a8c1639f66bca5afd83602287e982eb125a3a032e4cc5b5be91ab4d8d958fd4dc4cbd310eddc91d89ada4d33fcc963d259e222520281d14e13577906e33665a31afa7cb501cc0c1198d1f755005e82f29bcda62bbf8680bc23d09cac6a8c89709b30c91d27ea148f01ba745346f1ba9ce89cd9b71ff18668a0254c07479762dbb78117c50450506e2a0a606309aa383ec55a49d2569c3a3fef8aad456aa81cb859519765de18a4b92194e8a6a43f1dade801f71eb56699bc021fa48f320f4128d6c153a2ec1fba1c5ca55c5058641692365d311c8902aaf1428d83281aa970af5d98591cd3af30fbb5ee4a1b697491ff6dd727a329feb17b782f254d691f949baf96afa195c62f2c3fd1855a79b25268cef9822e3c6a1b3aa226ec494b070a8774426a5f8877714fe206e569635805208ac7823c8546ec33e4482a85d6fddf86a37a1c60f0a19b5dfe88031b7541af0e93cac8a3bb1ff3e60190b96faedc3b6f63d38f3ee4286fbaa053e8e27ed13b77b2c576d824d777ca53df76d9572e71f74ff180778bf57458b37fe9dbaa6f9927b48b059e5c7fd908ac826aed8f68764285022f4b5cb6b73ef7222ecb0d701c782ed5c16a7c94235fe7c3e0bef9da7310c5f3cda407c5ae7ecfb6b392ad576610b48af17b3fc8a2fd6cd2eee1153cc48a21ba6768a88367a807be008bea547402da4c92c2006c83d74c9d0ef2ca711c54036c8e76ac26c7d22060c9bfc2e67f1d1c6f6bd2f751879295ee21fcf8588c9504cacb02fa3e3fc6e2bed352447a5c2677caba0538960357d6d1706adef5e7d4f6298ed4ecacb7776de15d9bbd672f9991f4bdc4f07401f67cf3a74c0495ea58d0f76a2e6060cecc1d04b93808dc8d61130305740b408359d5552cc23a7b1eff4285d563b4b6b011a4a11372a2bb01cbda724482f95c4487b02c85cc121012b3213041ff6a689072daa4d86a4c125b110f4e2eeed2dd73db0f94ce995896e0b8a9f8f3e9559024251a5b1726b0b3775bac9fabed968d2d4ea31bbdfb2910331d92cb4ff5cc9037cc08cd35f88c4d7b89e46a8cbd05e3c35732b5046b33060dce5372b171daa526a46c3444b331e71f0455fb8b43dc46e2c9f2c4effccf040e56de00000007b16de337f13e7a610feac2f336e75405a530815366e7edfbb429babfd0e68db56892b94621edd9df6ff454ab1dcdb8d39d282fa7932ec7ba5203df2f4196538a1fa040c8014d20ff57fdb8515325a6997b9b71f2094e053f126402a47e628eeb7d8f665fbabe8f1a409ca9c7c5c25baaa0e9945acf27e96f8241a445f7d3352494ba4210b348fa0ec11ea67dead4fc1e5e4f9202931386468882bee59f8d12174198142ef7764d6b930e937e20d018c0cc5a780490356f5521aac74d2c1736e20ae5e0cd8cf6676ac337e8a8976aac75a698e34e72bac561038f228c13b6e974bc21bb79618111db507f3ba314dd2d05fd050d684cf33d8da5f8e5f723a092098ac5b180a6579d543515c2e1d0eb502193aedab526d354b625990c7d5a9f90d86c4e374054f1d14270b603065293e7fa3840de575413b74bfbc4f8c139947ade9a6f48907053f1ae3a95c2", 0x1001, 0x8004, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f000003c000)=[{&(0x7f0000df5f6e)=""/146, 0x23d}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x5e}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000c18fcf)=""/49, 0x31}], 0x8, &(0x7f0000c27ff9)=""/7, 0xfffffffffffffffd}, 0x0) 2018/02/26 09:25:15 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00007e8ffb)='veno\x00', 0x0) 2018/02/26 09:25:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000ff4)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f8effc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000416000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03353000000000fff0005325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common="677265300000e3f800", @ifru_flags}) 2018/02/26 09:25:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000032f67)=""/153, &(0x7f0000027000)=0x99) [ 57.944239] audit: type=1400 audit(1519637115.735:30): avc: denied { sys_admin } for pid=9110 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 09:25:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r0, r1) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0)=[], 0x0, &(0x7f00006c0000)}, 0x2020) 2018/02/26 09:25:15 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c7eff3)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00006affd8)={@common='gre0\x00', @ifru_addrs=@ethernet={0x306, @random="3e7596f732f4"}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000768fe0)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}) close(r1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe5) 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8)='|', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) request_key(&(0x7f00001cfffb)='user\x00', &(0x7f00002e2000)={0x73, 0x79, 0x7a}, &(0x7f0000a96000)='\\.wlan0)posix_acl_access\x00', 0x0) 2018/02/26 09:25:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:15 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000ff4)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f8effc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000416000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03353000000000fff0005325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common="677265300000e3f800", @ifru_flags}) 2018/02/26 09:25:15 executing program 0: r0 = userfaultfd(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={{{{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}, {{0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}}, 0x5, 0x40, 0x0, "f63eb06cf2ef30a787ed9fb0eaaef412df315f9b8290677b4ad6ab9261c5284bd338962531e1526502c6f416b2840e7ffa59ebba56d111f95829cdda1d9653a9843476d7f3cfca99ce6b66c90e33c9e9"}, 0x160) memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="3867e75b4c1ded6ab8670d44db10f85493e60f7c542da94c0ed5584e56af64265de80810dff73e234bef1695152b45e9bf6e9cf8c664c73b66d31f6431b2eb6ba85e0852d197b6e83e6e329d55599171fd41aa0211a616db3cc886feb78f5c316233f6fb45448a449e0a438eaa3ceace74032442ef9a5de55e8d79194b82a702e7037e46c135782da37dcf717dfeda4ccbceea6eaace15b2f06c06cb99ff76", 0x9f}, {&(0x7f0000000340)="bc", 0x1}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x64, "ebba540406d1f55187ff011440a58281f18caa3a3484383550f08617cfa705a4821e1a576f0ac6a46d990120267a9dab3b33b004f86bcb74c06fb58d84785a46eeb1dbe9acde497762bc88171257c49f7ebaa714c0777ba0dc3eda6896520316018ccb22"}, &(0x7f00000004c0)=0x6c) recvfrom(r1, &(0x7f00000000c0)=""/88, 0x58, 0x0, &(0x7f0000000140)=@ax25={0x3, {"2b61e9e097e9bd"}}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000)="b70832905003d7797e3409758cd6", &(0x7f0000000040)}}, &(0x7f00000001c0)) 2018/02/26 09:25:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000062000)) 2018/02/26 09:25:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r0, r1) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0)=[], 0x0, &(0x7f00006c0000)}, 0x2020) 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8)='|', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) request_key(&(0x7f00001cfffb)='user\x00', &(0x7f00002e2000)={0x73, 0x79, 0x7a}, &(0x7f0000a96000)='\\.wlan0)posix_acl_access\x00', 0x0) 2018/02/26 09:25:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r0, r1) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0)=[], 0x0, &(0x7f00006c0000)}, 0x2020) 2018/02/26 09:25:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8)='|', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) request_key(&(0x7f00001cfffb)='user\x00', &(0x7f00002e2000)={0x73, 0x79, 0x7a}, &(0x7f0000a96000)='\\.wlan0)posix_acl_access\x00', 0x0) 2018/02/26 09:25:15 executing program 1: prctl$intptr(0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000b000)='ns\x00') fstat(r0, &(0x7f000065bfbc)) 2018/02/26 09:25:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000bba000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000943000)='keyring\x00', &(0x7f0000f02ffb)={0x73, 0x79, 0x7a}, &(0x7f00004defd8)='|', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) request_key(&(0x7f00001cfffb)='user\x00', &(0x7f00002e2000)={0x73, 0x79, 0x7a}, &(0x7f0000a96000)='\\.wlan0)posix_acl_access\x00', 0x0) 2018/02/26 09:25:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000ff4)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f8effc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000416000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03353000000000fff0005325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common="677265300000e3f800", @ifru_flags}) 2018/02/26 09:25:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r0, r1) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x7fd, 0x4) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000059000)=0x89a, 0x4) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x0, @empty}, 0x10) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, &(0x7f0000ef4fc0)=[], 0x0, &(0x7f00006c0000)}, 0x2020) 2018/02/26 09:25:16 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:16 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000cadff1)='/dev/sequencer\x00', 0x8002, 0x0) writev(r0, &(0x7f0000abbff0)=[{&(0x7f00003c6000)="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", 0x18c}], 0x1) 2018/02/26 09:25:16 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0x356) 2018/02/26 09:25:16 executing program 1: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f00004eb000)="1f0000000203190000000700000002000000020509000100040580ff3ffe58", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[], 0x36a) 2018/02/26 09:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f00008b8f2f)=""/209, 0xd1, 0x0, &(0x7f0000336ff0)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000100)=""/224, 0x10019, 0x0, &(0x7f0000000100)) 2018/02/26 09:25:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/02/26 09:25:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001ff3)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000001000)) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0xffffffffffffffff, @dev={0xac, 0x14}}, @generic="c412c1d6dabde1b7d59303a9354594e8"}) 2018/02/26 09:25:16 executing program 3: remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0) 2018/02/26 09:25:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000014fff)=""/1, 0x0, 0x20000) 2018/02/26 09:25:16 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) 2018/02/26 09:25:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000a9dff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_mtu=0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={@syzn={0x73, 0x79, 0x7a}, @ifru_flags}) 2018/02/26 09:25:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000ff4)={0x10, 0x0, 0xffffffffffffffff, 0x5}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f8effc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000416000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000db3fd8)={@common='gre0\x00', @ifru_names=@generic="16f1a03353000000000fff0005325d59"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000062ffe0)={@common="677265300000e3f800", @ifru_flags}) 2018/02/26 09:25:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f00008b8f2f)=""/209, 0xd1, 0x0, &(0x7f0000336ff0)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000100)=""/224, 0x10019, 0x0, &(0x7f0000000100)) 2018/02/26 09:25:16 executing program 1: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f00004eb000)="1f0000000203190000000700000002000000020509000100040580ff3ffe58", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[], 0x36a) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:16 executing program 1: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f00004eb000)="1f0000000203190000000700000002000000020509000100040580ff3ffe58", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[], 0x36a) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) [ 58.411049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 58.441107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 1: writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f00004eb000)="1f0000000203190000000700000002000000020509000100040580ff3ffe58", 0x1f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[], 0x36a) 2018/02/26 09:25:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @empty}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000094d000)={0x0}, &(0x7f0000cdcffc)=0xc) fcntl$lock(r0, 0x5, &(0x7f00008406cb)={0x1, 0x4, 0x9, 0x5, r1}) r2 = syz_open_dev$usbmon(&(0x7f0000241000)='/dev/usbmon#\x00', 0x4, 0x200202) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f000088aff8)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f000007e000)={r3, 0x3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c38ff4)='/dev/rfkill\x00', 0x80400, 0x0) flock(r4, 0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00002bd000)={0x401, 0x0, 0x78, 0x7, 0x0, 0x0, 0x1, 0x6, 0x5, 0x1000}) ioctl$sock_ifreq(0xffffffffffffff9c, 0x0, &(0x7f00002ecfb0)={@common='bcsh0\x00', @ifru_settings={0xb2b8, 0x7, @sync=&(0x7f00004ac000)={0xde1, 0x65, 0x5}}}) r5 = add_key$user(&(0x7f0000575ffb)='user\x00', &(0x7f0000f7e000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00006e8fb4)="acd65f826b809eeda83e45754a7de1b9186b3a89fa64cc2ff33217cec57933ffaed711b390d3855f5022d54bb1c912c584f4d64fb281d91d70a55fba57f74abdc6a45dceb612e99453cd9d35", 0x4c, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000074e000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000323000)) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000e8ffec)=""/20) keyctl$get_keyring_id(0x0, r5, 0x40) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x2, @loopback=0x7f000001}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000b30000)) socketpair$inet6(0xa, 0x0, 0x80200, &(0x7f00002bfff8)) socket$inet(0x2, 0x0, 0x20000000000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f00002d3f70)=[{&(0x7f0000fe5ff0)='p', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/02/26 09:25:16 executing program 1: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000f3000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000)=[], 0x80, 0x0) recvfrom$unix(r1, &(0x7f0000063000), 0x0, 0x0, &(0x7f0000c0e000)=@file={0x0, './file0\x00'}, 0xa) close(r0) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 58.454852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 58.457632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:25:16 executing program 7: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000fa1000)={0x0}, &(0x7f0000fa1000)=0xfffffffffffffca9) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000faeff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00005ce000)={@common='tunl0\x00\x00\x00\x00\x00\x00\b\x00', @ifru_names=@generic="a426fe9b323ecc7f883be5f2f8d6d8d5"}) [ 58.519524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 58.538303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:25:16 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000005fc0)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @igmp={0x0, 0x1, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000003fec)={0x0, 0x1}) 2018/02/26 09:25:16 executing program 2: r0 = socket$inet(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000008fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003fca)="020900760200000000ef37ca220085e9", 0x10}], 0x1}, 0x0) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f00008b8f2f)=""/209, 0xd1, 0x0, &(0x7f0000336ff0)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000100)=""/224, 0x10019, 0x0, &(0x7f0000000100)) 2018/02/26 09:25:16 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9cff4)={0x0}, &(0x7f00002d7000)=0x29e) r1 = syz_open_procfs(r0, &(0x7f0000d1bff1)='attr/keycreate\x00') write$selinux_context(r1, &(0x7f0000c2cfdc)='system_u:object_r:init_var_run_t:s0\x00', 0x24) r2 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100), 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) 2018/02/26 09:25:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000058f000)="440d0503001d000000000020ec", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000069d000), &(0x7f00006ccffc)) 2018/02/26 09:25:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b16ff6)='/dev/ptmx\x00', 0x0, 0x0) flistxattr(r0, &(0x7f000051c000)=""/5, 0x5) 2018/02/26 09:25:16 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0) 2018/02/26 09:25:16 executing program 5: futex(&(0x7f0000fdcffc), 0x800000000005, 0x0, &(0x7f0000920000), &(0x7f0000fdc000), 0x4000000) 2018/02/26 09:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000675000)='task\x00') execveat(r0, &(0x7f0000018ff8)='./file0\x00', &(0x7f00004afff8)=[&(0x7f0000018fed)="3f0101f8ff50766d6e65743110"], &(0x7f0000508000)=[], 0x0) 2018/02/26 09:25:16 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) r1 = dup(r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000fc1fe4)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc1ff8)=[{&(0x7f00005c1f05)}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x3) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x70e, 0x93}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x150, 0xffffffffffffffc0, 0x400}) 2018/02/26 09:25:16 executing program 5: futex(&(0x7f0000fdcffc), 0x800000000005, 0x0, &(0x7f0000920000), &(0x7f0000fdc000), 0x4000000) 2018/02/26 09:25:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000c90000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900020002e700000200a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 58.625660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 58.644735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000675000)='task\x00') execveat(r0, &(0x7f0000018ff8)='./file0\x00', &(0x7f00004afff8)=[&(0x7f0000018fed)="3f0101f8ff50766d6e65743110"], &(0x7f0000508000)=[], 0x0) 2018/02/26 09:25:16 executing program 5: futex(&(0x7f0000fdcffc), 0x800000000005, 0x0, &(0x7f0000920000), &(0x7f0000fdc000), 0x4000000) 2018/02/26 09:25:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/26 09:25:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x20011, r0, 0x0) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f000026d000)={@local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000de7fec)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f000013efec)={@local={0xfe, 0x80, [], 0x0, 0xaa}}, 0x14) 2018/02/26 09:25:16 executing program 2: mkdir(&(0x7f0000c32000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x0) utimes(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)={{0x77359400}}) 2018/02/26 09:25:16 executing program 3: r0 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00006ca000), &(0x7f0000389000)=0x4) 2018/02/26 09:25:16 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f00008b8f2f)=""/209, 0xd1, 0x0, &(0x7f0000336ff0)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000100)=""/224, 0x10019, 0x0, &(0x7f0000000100)) [ 58.680737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/02/26 09:25:16 executing program 5: futex(&(0x7f0000fdcffc), 0x800000000005, 0x0, &(0x7f0000920000), &(0x7f0000fdc000), 0x4000000) 2018/02/26 09:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000675000)='task\x00') execveat(r0, &(0x7f0000018ff8)='./file0\x00', &(0x7f00004afff8)=[&(0x7f0000018fed)="3f0101f8ff50766d6e65743110"], &(0x7f0000508000)=[], 0x0) 2018/02/26 09:25:16 executing program 6: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "cc6eb9f0243bfdefe615178677b54d53"}, 0x20) 2018/02/26 09:25:16 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x20001) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000aca000)='\t', 0x1, 0x0) 2018/02/26 09:25:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f000000c000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "124b52", 0x10, 0x2f, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}}, &(0x7f0000002fe8)) 2018/02/26 09:25:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/02/26 09:25:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000058cfc8)={&(0x7f000078d000)={0x10}, 0xc, &(0x7f00004e7ff0)={&(0x7f0000741000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14}}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000675000)='task\x00') execveat(r0, &(0x7f0000018ff8)='./file0\x00', &(0x7f00004afff8)=[&(0x7f0000018fed)="3f0101f8ff50766d6e65743110"], &(0x7f0000508000)=[], 0x0) 2018/02/26 09:25:16 executing program 4: r0 = gettid() capget(&(0x7f0000d5cff8)={0x19980330, r0}, &(0x7f0000185fe8)) 2018/02/26 09:25:16 executing program 7: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000a6e000)={&(0x7f0000abbf80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f000daec57f844686fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35160ec64fc333c1c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff900000000000000076167b456"}, 0x80, &(0x7f0000b3f000)=[], 0x0, &(0x7f0000ffada0)=[]}, 0x0) 2018/02/26 09:25:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f0000000080)={0x14, 0x1d, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdeff8)=[{r0}], 0x1, 0xb92) close(r1) [ 58.775783] SELinux: policydb version -256282932 does not match my version range 15-30 2018/02/26 09:25:16 executing program 6: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "cc6eb9f0243bfdefe615178677b54d53"}, 0x20) 2018/02/26 09:25:16 executing program 7: clock_getres(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, r0}, &(0x7f000042c000)) 2018/02/26 09:25:16 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000bdb000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000d06000)='stat\x00') sendfile(r0, r1, 0x0, 0x3ff) 2018/02/26 09:25:16 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000679ff2)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000d98de3)=ANY=[], 0xfe96) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000a6e000)={&(0x7f0000abbf80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f000daec57f844686fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35160ec64fc333c1c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff900000000000000076167b456"}, 0x80, &(0x7f0000b3f000)=[], 0x0, &(0x7f0000ffada0)=[]}, 0x0) 2018/02/26 09:25:16 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f00003efff0)={0x0, 0x0, 0x10000}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000deefe7)=""/128, 0x80) 2018/02/26 09:25:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdeff8)=[{r0}], 0x1, 0xb92) close(r1) 2018/02/26 09:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004ba000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x491d, 0x81}) r1 = syz_open_pts(r0, 0x8000000005) writev(r1, &(0x7f00009c9f90)=[{&(0x7f0000a91000)="cb89", 0x2}], 0x1) 2018/02/26 09:25:16 executing program 2: clock_gettime(0x0, &(0x7f0000001ff0)={0x0}) mmap(&(0x7f0000000000/0x2a000)=nil, 0x2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000986ff8)='./file0\x00', &(0x7f0000985000)={{}, {r0}}) sigaltstack(&(0x7f0000985000/0x1000)=nil, &(0x7f0000000ff8)) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000a6e000)={&(0x7f0000abbf80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f000daec57f844686fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35160ec64fc333c1c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff900000000000000076167b456"}, 0x80, &(0x7f0000b3f000)=[], 0x0, &(0x7f0000ffada0)=[]}, 0x0) 2018/02/26 09:25:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f0000000040)="d0", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000004000)='./file0\x00') syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:16 executing program 7: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x2000004004031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/146, 0x92}], 0x1, &(0x7f0000001b40)=[], 0x0, 0x0) 2018/02/26 09:25:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000a6e000)={&(0x7f0000abbf80)=@generic={0xa, "daf8ffe6ffffff0001f20000000000b61b340e63f8ab691822e903e7d64ac8fef9507f000daec57f844686fbbf26093d6b53efc1cb2b880001186a68506776e9eba5ebd039273202a52700faccec35160ec64fc333c1c99287b26eaece2900727e347f814dc256ce82cb2c8080000000bff900000000000000076167b456"}, 0x80, &(0x7f0000b3f000)=[], 0x0, &(0x7f0000ffada0)=[]}, 0x0) 2018/02/26 09:25:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00002fa000)) 2018/02/26 09:25:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='keyring\x00', r0) keyctl$clear(0x7, r0) 2018/02/26 09:25:16 executing program 6: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "cc6eb9f0243bfdefe615178677b54d53"}, 0x20) 2018/02/26 09:25:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdeff8)=[{r0}], 0x1, 0xb92) close(r1) 2018/02/26 09:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004ba000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x491d, 0x81}) r1 = syz_open_pts(r0, 0x8000000005) writev(r1, &(0x7f00009c9f90)=[{&(0x7f0000a91000)="cb89", 0x2}], 0x1) [ 58.880958] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.903595] SELinux: policydb version -256282932 does not match my version range 15-30 2018/02/26 09:25:16 executing program 1: r0 = syz_open_dev$tun(&(0x7f00006f2ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000bc2000)=0x102) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000533000)={@generic="020000000400000000040080000abd22", @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00008a6ffc)}}) r1 = socket(0x10, 0x802, 0x0) sendto(r1, &(0x7f0000d0efee)="120000001200e7ff0a001c0000000000809b", 0x12, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000ceafe4)={&(0x7f0000d67000)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @remote}}}, 0x32, &(0x7f0000fedfe0)=[], 0x0, &(0x7f0000b5ff1e)=""/226, 0xe2}, 0x0) 2018/02/26 09:25:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0xfffffffffffffffe) 2018/02/26 09:25:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000084b000)={0x8, 0x0, &(0x7f00004f3000)=[@increfs={0x40046304}], 0x0, 0x0, &(0x7f000026b000)}) 2018/02/26 09:25:16 executing program 6: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "cc6eb9f0243bfdefe615178677b54d53"}, 0x20) 2018/02/26 09:25:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x60000, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x9, &(0x7f0000000080)={0x6}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x8033, r0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff, 0x41, 0x1, 0x0, []}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3fffffffc00}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x80000000}, &(0x7f0000000180)=0x8) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/26 09:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004ba000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x491d, 0x81}) r1 = syz_open_pts(r0, 0x8000000005) writev(r1, &(0x7f00009c9f90)=[{&(0x7f0000a91000)="cb89", 0x2}], 0x1) 2018/02/26 09:25:16 executing program 7: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f00009dffb8)=[]}, 0x0) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0)=[], 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) [ 58.950127] SELinux: policydb version -256282932 does not match my version range 15-30 2018/02/26 09:25:16 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000fdeff8)=[{r0}], 0x1, 0xb92) close(r1) [ 59.000353] binder: BINDER_SET_CONTEXT_MGR already set 2018/02/26 09:25:16 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000005000)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000281000)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000005000)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:16 executing program 7: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f00009dffb8)=[]}, 0x0) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0)=[], 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 2018/02/26 09:25:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000bcafe0)=[{&(0x7f0000a04f40)=""/192, 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) memfd_create(&(0x7f0000000000)='ppp1[GPL-\x00', 0x3) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x0) r1 = syz_open_pts(r0, 0x801) memfd_create(&(0x7f0000000140)='}md5sum(^\x00', 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 2018/02/26 09:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00004ba000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x491d, 0x81}) r1 = syz_open_pts(r0, 0x8000000005) writev(r1, &(0x7f00009c9f90)=[{&(0x7f0000a91000)="cb89", 0x2}], 0x1) 2018/02/26 09:25:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x60000, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x9, &(0x7f0000000080)={0x6}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x8033, r0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff, 0x41, 0x1, 0x0, []}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3fffffffc00}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x80000000}, &(0x7f0000000180)=0x8) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/26 09:25:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x44000002285, &(0x7f0000013000)="f8f8ffffffff18ffff0000031dc5d86c814a0083c5e9aed7b6fcc9bfe2d8b3181f16ef7dc14b2caf7e00000007") read(r0, &(0x7f0000000000)=""/36, 0x1f) 2018/02/26 09:25:16 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b"}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2018/02/26 09:25:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f000092bfe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0x8f, 0x3, 0x0, 0xb43b509911327e61) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000957000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f00002c9000)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) [ 59.011984] SELinux: policydb version -256282932 does not match my version range 15-30 [ 59.040085] binder_alloc: 9390: binder_alloc_buf, no vma [ 59.043787] binder: 9390:9398 ioctl 40046207 0 returned -16 [ 59.052843] binder: 9390:9394 transaction failed 29189/-3, size 40-8 line 3127 [ 59.065797] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.071976] binder: release 9390:9394 transaction 74 out, still active 2018/02/26 09:25:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x60000, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x9, &(0x7f0000000080)={0x6}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x8033, r0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff, 0x41, 0x1, 0x0, []}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3fffffffc00}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x80000000}, &(0x7f0000000180)=0x8) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/26 09:25:16 executing program 5: mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mkdir(&(0x7f00006aaff8)='./file1\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 2018/02/26 09:25:16 executing program 7: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f00009dffb8)=[]}, 0x0) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0)=[], 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 2018/02/26 09:25:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000026007f000000000000007701000000ff0100000000000000ff04ffff0100ff10", 0x24) 2018/02/26 09:25:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x60000, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x9, &(0x7f0000000080)={0x6}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x8033, r0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff, 0x41, 0x1, 0x0, []}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3fffffffc00}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x80000000}, &(0x7f0000000180)=0x8) ioctl(r0, 0x8916, &(0x7f0000000000)) 2018/02/26 09:25:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b09000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) read$eventfd(r1, &(0x7f000039dff8), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x16) 2018/02/26 09:25:16 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000006000)='/dev/input/mice\x00', 0x0, 0x80001) poll(&(0x7f0000000fc0)=[{r0}], 0x1, 0x100) writev(r0, &(0x7f0000004ff0)=[{&(0x7f0000001000)="ab", 0x1}], 0x1) [ 59.083683] binder: unexpected work type, 4, not freed [ 59.094929] binder: undelivered TRANSACTION_COMPLETE [ 59.104377] binder: send failed reply for transaction 74, target dead 2018/02/26 09:25:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbfffffffffffffff, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4000, 0x0) 2018/02/26 09:25:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000c78fb0)={@common='bridge0\x00', @ifru_data=&(0x7f000011efe0)="0e0000000000000000020400e4000000b4931400001200e7ffff870000002023"}) 2018/02/26 09:25:17 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000054d000)='ramfs\x00', 0x3, &(0x7f0000313000)) setxattr(&(0x7f0000329ff8)='./file0\x00', &(0x7f0000059fe7)=@known='system.posix_acl_default\x00', &(0x7f0000598fff)='\x00', 0x1, 0x0) 2018/02/26 09:25:17 executing program 7: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000bba000)={&(0x7f0000c57ff8)=@abs, 0x8, &(0x7f00006c6ff0)=[], 0x0, &(0x7f00009dffb8)=[]}, 0x0) recvmsg(r0, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0)=[], 0x0, &(0x7f0000f9fff8)=""/90, 0x5a}, 0x0) 2018/02/26 09:25:17 executing program 0: mkdir(&(0x7f0000b4dff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000036cff8)='./file0\x00', 0x0) mount(&(0x7f00001a4ff2)='./file0/file0\x00', &(0x7f0000f89ff8)='./file0\x00', &(0x7f000067b000)='\x00v\t', 0x1004, &(0x7f000073afff)) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f0000985000)='./file0\x00') syz_fuseblk_mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f000092bfe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0x8f, 0x3, 0x0, 0xb43b509911327e61) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000957000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f00002c9000)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b09000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) read$eventfd(r1, &(0x7f000039dff8), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x16) 2018/02/26 09:25:17 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000006000)='/dev/input/mice\x00', 0x0, 0x80001) poll(&(0x7f0000000fc0)=[{r0}], 0x1, 0x100) writev(r0, &(0x7f0000004ff0)=[{&(0x7f0000001000)="ab", 0x1}], 0x1) 2018/02/26 09:25:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 2018/02/26 09:25:17 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ae1000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000aef9f9)={{0x80}, "706f7274310000004000000000000000000000d600fffffff00000000000000000000000000000000000000700"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000dccf58)={{0x80}, 'port0\x00'}) close(r0) 2018/02/26 09:25:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000d17000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0xc004510e, &(0x7f00001e8ffd)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 2018/02/26 09:25:17 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f00002cbff6)='./control\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) 2018/02/26 09:25:17 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00003b7000)='./file0/file0\x00') socket$pptp(0x18, 0x1, 0x2) syz_fuse_mount(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0xfc) 2018/02/26 09:25:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/4, &(0x7f0000a94000)=0x4) 2018/02/26 09:25:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/4, &(0x7f0000a94000)=0x4) 2018/02/26 09:25:17 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0/') 2018/02/26 09:25:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f000092bfe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0x8f, 0x3, 0x0, 0xb43b509911327e61) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000957000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f00002c9000)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0/') 2018/02/26 09:25:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/4, &(0x7f0000a94000)=0x4) 2018/02/26 09:25:17 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0/') 2018/02/26 09:25:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000ea6000)={@common='tunl0\x00', @ifru_map={0xffffffff00000001}}) 2018/02/26 09:25:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b09000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) read$eventfd(r1, &(0x7f000039dff8), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x16) 2018/02/26 09:25:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/4, &(0x7f0000a94000)=0x4) 2018/02/26 09:25:17 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000006000)='/dev/input/mice\x00', 0x0, 0x80001) poll(&(0x7f0000000fc0)=[{r0}], 0x1, 0x100) writev(r0, &(0x7f0000004ff0)=[{&(0x7f0000001000)="ab", 0x1}], 0x1) 2018/02/26 09:25:17 executing program 7: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000d06ff8)='./file0\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0/') 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$tun(&(0x7f000070d000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f00004ee000)="ff55d36cffba04715d0000000000000100000000", 0x14) dup2(r0, r1) 2018/02/26 09:25:17 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00003b7000)='./file0/file0\x00') socket$pptp(0x18, 0x1, 0x2) syz_fuse_mount(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f000092bfe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0x8f, 0x3, 0x0, 0xb43b509911327e61) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000957000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, &(0x7f00002c9000)=[]}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x40085112, &(0x7f0000000000)={0x5, &(0x7f0000e82000)=[{}, {}, {}, {}, {}]}) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000449000)='/dev/loop#\x00', 0x0, 0x80001) r1 = memfd_create(&(0x7f0000515ff0)="74756e08000000000000008000000000", 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)}], 0x1, 0x10049) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r1}) sendfile(r0, r1, &(0x7f0000a30ff8), 0xfffffffe) 2018/02/26 09:25:17 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x200000}) 2018/02/26 09:25:17 executing program 4: r0 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r0, &(0x7f00008c7000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000717000)=@ipv4_getnetconf={0x14, 0x52, 0x40d, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 09:25:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000b09000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b38000)=0x3c) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) read$eventfd(r1, &(0x7f000039dff8), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = dup2(r3, r4) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x16) 2018/02/26 09:25:17 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000006000)='/dev/input/mice\x00', 0x0, 0x80001) poll(&(0x7f0000000fc0)=[{r0}], 0x1, 0x100) writev(r0, &(0x7f0000004ff0)=[{&(0x7f0000001000)="ab", 0x1}], 0x1) 2018/02/26 09:25:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x40085112, &(0x7f0000000000)={0x5, &(0x7f0000e82000)=[{}, {}, {}, {}, {}]}) 2018/02/26 09:25:17 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x0}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1, 0x0, 0x0}, 0x8) write(r0, &(0x7f0000002000)="af", 0x1) 2018/02/26 09:25:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x40085112, &(0x7f0000000000)={0x5, &(0x7f0000e82000)=[{}, {}, {}, {}, {}]}) 2018/02/26 09:25:17 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00003b7000)='./file0/file0\x00') socket$pptp(0x18, 0x1, 0x2) syz_fuse_mount(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 7: r0 = syz_open_dev$sg(&(0x7f00006ec000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227e, &(0x7f0000000040)="82") 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c3f18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0x40085112, &(0x7f0000000000)={0x5, &(0x7f0000e82000)=[{}, {}, {}, {}, {}]}) 2018/02/26 09:25:17 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00003b7000)='./file0/file0\x00') socket$pptp(0x18, 0x1, 0x2) syz_fuse_mount(&(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$eventfd(r1, &(0x7f0000000040), 0xd8b74f24de67205d) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0x10001) 2018/02/26 09:25:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00003c2ff8)=[{&(0x7f000095efd7)="2900000020001900013d00101b0000f60200001615de0005000000040d000a00051700000000000008", 0x29}], 0x1) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c3f18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000b07000)={0x10, 0x0, 0xffffffffffffffff, 0x20001000001}, 0xc) 2018/02/26 09:25:17 executing program 1: r0 = epoll_create1(0x0) poll(&(0x7f000014eff8)=[{r0, 0x11}], 0x1, 0x7f31) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 2018/02/26 09:25:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x1, 0x0, 0x0, &(0x7f0000b20000/0x2000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000006000)}], 0xd5, 0x0) 2018/02/26 09:25:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x24000847, 0x0, 0x0) 2018/02/26 09:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000b07000)={0x10, 0x0, 0xffffffffffffffff, 0x20001000001}, 0xc) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c3f18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/26 09:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000b07000)={0x10, 0x0, 0xffffffffffffffff, 0x20001000001}, 0xc) 2018/02/26 09:25:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000f36000)=@file={0x1, './file0\x00'}, 0xa) r2 = request_key(&(0x7f0000919ffb)='ceph\x00', &(0x7f0000e08000)={0x73, 0x79, 0x7a}, &(0x7f00007ff000)='/dev/sg#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000bbaff8)='trusted\x00', &(0x7f0000c33ffb)={0x73, 0x79, 0x7a}, &(0x7f00000d6000), 0x0, r2) listen(r1, 0x0) add_key(&(0x7f0000efeffa)='logon\x00', &(0x7f0000accffb)={0x73, 0x79, 0x7a}, &(0x7f00008cdf77), 0x0, 0xfffffffffffffffe) dup2(r0, r1) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00002c3f18)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@empty, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, {}, {}, 0x0, 0xffffffffffffffff, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x0, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00005da000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:17 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$eventfd(r1, &(0x7f0000000040), 0xd8b74f24de67205d) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0x10001) 2018/02/26 09:25:17 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f000093bffc)=0xdd, 0x274) 2018/02/26 09:25:17 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000977000)=""/8, &(0x7f000075d000)=0x8) 2018/02/26 09:25:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x1a5582) poll(&(0x7f0000ecafc8)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000977000)=""/8, &(0x7f000075d000)=0x8) 2018/02/26 09:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000b07000)={0x10, 0x0, 0xffffffffffffffff, 0x20001000001}, 0xc) 2018/02/26 09:25:17 executing program 6: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000c81ff2)=@l2={0x1f}, 0xe) 2018/02/26 09:25:17 executing program 7: r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x441) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x440000000000127d, &(0x7f000002cfff)) 2018/02/26 09:25:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000000000)=""/144, 0x1d7}, {&(0x7f0000000000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:17 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/26 09:25:17 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4000002, 0x44031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff9) sendto(0xffffffffffffffff, &(0x7f0000d6a000), 0x0, 0x0, &(0x7f0000266000)=@hci={0x1f}, 0xc) syz_open_procfs(0x0, &(0x7f0000516fbc)="00806e0240246d04653d098a4335ddf8a409a4f9e24ead41295ef68da251a43f732a2d65e8330025dc66b9dbe36dd6a13bf8a10d80013223d174c0aea1c3f3147cc40006") 2018/02/26 09:25:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000a1fe0)={@dev={0xfe, 0x80}, 0x400, 0x0, 0xff}, 0x20) 2018/02/26 09:25:17 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000977000)=""/8, &(0x7f000075d000)=0x8) 2018/02/26 09:25:17 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/26 09:25:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000000000)=""/144, 0x1d7}, {&(0x7f0000000000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x1a5582) poll(&(0x7f0000ecafc8)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/40) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "0900000053b42780582200000000030008000517545274946a94771f398b4046"}) 2018/02/26 09:25:17 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$eventfd(r1, &(0x7f0000000040), 0xd8b74f24de67205d) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0x10001) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000ad6000)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000d09f80)="ff010000000000001e0020000100000100000000", 0x14) 2018/02/26 09:25:17 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a6bff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000bff9)="666400000004bb") getdents64(r0, &(0x7f0000f72ea7)=""/528, 0x210) getdents(r0, &(0x7f000043c000)=""/71, 0x47) 2018/02/26 09:25:17 executing program 3: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000009000/0x1000)=nil) 2018/02/26 09:25:17 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000977000)=""/8, &(0x7f000075d000)=0x8) 2018/02/26 09:25:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x1a5582) poll(&(0x7f0000ecafc8)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000000000)=""/144, 0x1d7}, {&(0x7f0000000000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000646ff2)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000b1c000)=0xfff, 0x4) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000009, &(0x7f0000534ffc)=0x4, 0x4) 2018/02/26 09:25:17 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a6bff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000bff9)="666400000004bb") getdents64(r0, &(0x7f0000f72ea7)=""/528, 0x210) getdents(r0, &(0x7f000043c000)=""/71, 0x47) 2018/02/26 09:25:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3bff4)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x1a5582) poll(&(0x7f0000ecafc8)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000000000)=""/144, 0x1d7}, {&(0x7f0000000000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:17 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) write$eventfd(r1, &(0x7f0000000040), 0xd8b74f24de67205d) connect$inet6(r0, &(0x7f0000d3cfe4)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendfile(r0, r1, &(0x7f0000000000)=0x2d, 0x10001) 2018/02/26 09:25:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000d0e000)={0x0, 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x0, r0+10000000}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000852ff8)={0x77359400}, &(0x7f0000326ffc), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000049ff0), &(0x7f0000a2a000), 0x0) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000b1c000)=0xfff, 0x4) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000009, &(0x7f0000534ffc)=0x4, 0x4) 2018/02/26 09:25:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000d11000), &(0x7f0000d11000)=0x4) 2018/02/26 09:25:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000140)=[], 0x0, &(0x7f000053c000)=[]}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000080)=[{&(0x7f0000000040)="3a5ed1b52a73fa7d85", 0x9}], 0x1, &(0x7f00000000c0)=[], 0x0, 0x90}, 0x90) close(r0) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) 2018/02/26 09:25:17 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a6bff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000bff9)="666400000004bb") getdents64(r0, &(0x7f0000f72ea7)=""/528, 0x210) getdents(r0, &(0x7f000043c000)=""/71, 0x47) 2018/02/26 09:25:17 executing program 4: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00004ee000)="ff55d36cffba04715d0000000000000100000000", 0x14) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) 2018/02/26 09:25:17 executing program 2: clock_getres(0xdffffffffffffff5, &(0x7f00003dc000)) 2018/02/26 09:25:17 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a6bff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000000bff9)="666400000004bb") getdents64(r0, &(0x7f0000f72ea7)=""/528, 0x210) getdents(r0, &(0x7f000043c000)=""/71, 0x47) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) 2018/02/26 09:25:17 executing program 3: r0 = inotify_init1(0x0) r1 = dup2(r0, r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000ffdffc)) 2018/02/26 09:25:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008fff)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000009000)=[], 0x26, 0x0, &(0x7f0000009000)="ed366ae871ea85760e4debd4f57974d0d3f22e50561ba5e7cdf3eb5f07864c14b1f9c4c764cd"}) 2018/02/26 09:25:17 executing program 2: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000054ff3)='/dev/snd/seq\x00', 0x0, 0x101042) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000000ef74)={0x0, 0x0, 0x0, "7175657565300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ff00"}) write$sndseq(r2, &(0x7f0000048fe4)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @control}], 0x1c) clock_getres(0x0, &(0x7f0000034ff8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000013fc0)={0x12, @time={0x77359400, r3}}) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000b1c000)=0xfff, 0x4) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000009, &(0x7f0000534ffc)=0x4, 0x4) 2018/02/26 09:25:17 executing program 4: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 6: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) 2018/02/26 09:25:17 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000b1c000)=0xfff, 0x4) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000000000009, &(0x7f0000534ffc)=0x4, 0x4) 2018/02/26 09:25:17 executing program 3: creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x48c00, 0x0) 2018/02/26 09:25:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000030000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000028ff0)={&(0x7f0000030fdc)=@ipv4_newroute={0x24, 0x18, 0x1f, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008fff)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000009000)=[], 0x26, 0x0, &(0x7f0000009000)="ed366ae871ea85760e4debd4f57974d0d3f22e50561ba5e7cdf3eb5f07864c14b1f9c4c764cd"}) 2018/02/26 09:25:17 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x0) clone(0x0, &(0x7f000000bfff), &(0x7f000000bffc), &(0x7f0000004000), &(0x7f0000007000)) [ 60.016045] binder: 9713:9719 transaction failed 29189/-22, size 0-0 line 3004 [ 60.034693] binder: 9713:9719 ioctl c0306201 20009000 returned -14 [ 60.042641] binder: 9713:9719 transaction failed 29189/-22, size 0-0 line 3004 [ 60.057555] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:17 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000016fee)="97", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3, @empty}, 0x10) 2018/02/26 09:25:17 executing program 4: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000309ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xfffffffffffffff9) syslog(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 2018/02/26 09:25:17 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 5: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f000000cff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r1) [ 60.079217] binder: 9734:9739 transaction failed 29189/-22, size 0-0 line 3004 2018/02/26 09:25:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008fff)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000009000)=[], 0x26, 0x0, &(0x7f0000009000)="ed366ae871ea85760e4debd4f57974d0d3f22e50561ba5e7cdf3eb5f07864c14b1f9c4c764cd"}) 2018/02/26 09:25:17 executing program 4: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000344000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000cb2ffc)) rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r3+10000000}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000169000)={0x1}) epoll_wait(r2, &(0x7f0000f64000)=[{}], 0x1, 0x0) 2018/02/26 09:25:17 executing program 1: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000051bfe0)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x2}, 0x20) 2018/02/26 09:25:17 executing program 7: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:25:17 executing program 6: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:17 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:25:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000b60fb0)) 2018/02/26 09:25:17 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) [ 60.126720] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 09:25:18 executing program 3: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) 2018/02/26 09:25:18 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000fd1fe0)={0x20, 0x1, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x12, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000028ff0)={&(0x7f0000005000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@RTA_PREFSRC={0x8, 0x7, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) [ 60.196036] binder: 9762:9765 transaction failed 29189/-22, size 0-0 line 3004 2018/02/26 09:25:18 executing program 5: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:18 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 3: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, {0xa, 0xffffffffffffffff, 0x0, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0xffffffac) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/02/26 09:25:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000008fff)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000009000)=[], 0x26, 0x0, &(0x7f0000009000)="ed366ae871ea85760e4debd4f57974d0d3f22e50561ba5e7cdf3eb5f07864c14b1f9c4c764cd"}) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f000035cffc)=0x2d, 0x146) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:18 executing program 1: symlink(&(0x7f0000000000)='./control\x00', &(0x7f000000affa)='./bus\x00') symlink(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000080)='./control\x00') syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00005ba000)={0x0}, &(0x7f00006d2ffc)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000cc2000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4209, r2, 0x20008f01, 0x0) 2018/02/26 09:25:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000fd1fe0)={0x20, 0x1, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x12, @u32}]}, 0x20}, 0x1}, 0x0) [ 60.252031] binder: undelivered TRANSACTION_ERROR: 29189 [ 60.280621] binder: 9796:9802 transaction failed 29189/-22, size 0-0 line 3004 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f000035cffc)=0x2d, 0x146) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000ecd4f6)={0x19980330}, &(0x7f0000032fe8)) getsockopt(r0, 0x0, 0x41, &(0x7f0000694fef)=""/17, &(0x7f0000dfeffc)=0x19e) 2018/02/26 09:25:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000fd1fe0)={0x20, 0x1, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x12, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f00006d6000), 0x3) 2018/02/26 09:25:18 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000080)=""/176, 0xffffffffffffff79) 2018/02/26 09:25:18 executing program 2: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 1: symlink(&(0x7f0000000000)='./control\x00', &(0x7f000000affa)='./bus\x00') symlink(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000080)='./control\x00') syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00008c5fe4)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000fd1fe0)={0x20, 0x1, 0x1, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x12, @u32}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 1: symlink(&(0x7f0000000000)='./control\x00', &(0x7f000000affa)='./bus\x00') symlink(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000080)='./control\x00') syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 0: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='setgroups\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="ac", 0x1}], 0x1) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f000035cffc)=0x2d, 0x146) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:18 executing program 4: mkdir(&(0x7f00003c9ff8)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000279ff8)='./file0\x00', &(0x7f0000283ffa)='ramfs\x00', 0x3, 0x0) open(&(0x7f00001fd000)='./file0/file0\x00', 0x8140, 0x0) 2018/02/26 09:25:18 executing program 1: symlink(&(0x7f0000000000)='./control\x00', &(0x7f000000affa)='./bus\x00') symlink(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000080)='./control\x00') syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f000035cffc)=0x2d, 0x146) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @broadcast=0xffffffff}, 0x10) [ 60.303309] binder: 9796:9802 ioctl c0306201 20009000 returned -14 2018/02/26 09:25:18 executing program 5: clock_adjtime(0x0, &(0x7f0000000fb0)={0x8}) 2018/02/26 09:25:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000080)="b3476ee7", 0x4) 2018/02/26 09:25:18 executing program 6: r0 = inotify_init() ppoll(&(0x7f0000972000)=[{r0}], 0x1, &(0x7f0000d7b000)={0x0, 0x989680}, &(0x7f0000b11225), 0x8) 2018/02/26 09:25:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00004ff000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) 2018/02/26 09:25:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/02/26 09:25:18 executing program 4: openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) 2018/02/26 09:25:18 executing program 0: r0 = socket$inet(0x10, 0x4000000000002, 0x0) sendmsg(r0, &(0x7f000001c000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000001bfd0)="2f0000001e000ffd6d0a00000000000002dd00d8020000001f5f08c908000100000000060beeffff005867855e07a5", 0x2f}], 0x1}, 0x0) 2018/02/26 09:25:18 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendmsg(r1, &(0x7f0000b82000)={&(0x7f0000ee4000)=@rc={0x1f}, 0xa, &(0x7f0000e42000)=[{&(0x7f0000781000)="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", 0x470}], 0x1, &(0x7f0000634000)=[]}, 0x0) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb5370734681305261aec26b9f309ddf8c4cb8f7a32181a41722af15009ecd0f0080d3b55ec7f4338a45f8c3b976b36f8f21e1b612763db6213864fdde6f3c114471844c7e5cd22a7922be21fc9984a403682c8407c059810f0f715a8a5d56e640486589bac4d88a79ef15437423caeb1b2c506ae14de606d627fce1fdc6f6d3907a670d93e6ece58cb79150b8844c4a312b1d4589178a9526fe1f446ed69a4d141a9ea1b7dd87ee3c38e24f468566c9e72193f226c4d3b730b5cfd10032841b1f4ab66d74ccb8c9b1d8587aaed160b170792a181d5d275c922ea41d617bdc133e6653ab0ad5c30c1e167dcd67ff7c876be9b4e0621bdca83967caba37fe9ff310b9e70c829558269cf64c279cb7b4e8200936098eddfde3326d3f70d9ef9d699005e38bdcc5efecfa32c14f5ea23d2b0c2010bcaee37f4ae90c95e6a114fd70752df56e7b48ce3a902caf714c2ba85f55b9ca2d777dfe226b7b9b5e8f00fbc91baf5a5de8b6546bb10d156b37d0ad2df0edccbdcf87e316b1c14194f90f7e2ef8e4c484a74678b4ab702803aa259a3500ea3049cde0e60c9b49f2248c76cb2d75bb2f0fed652b6e347366bfed5757af2c100f1bf066c95a492c2ee3a468cac4d1497acf93752170a4fb0e46705a43895ee8d95e1b2902f1440e767c76b7a9790fed0cd4a1d9d4425afec459581b8597bb46518d96aa12fa6b7966b08c4fb72f95bf87a7281e93fea6624e7f20f2e35a0ebcfe2e973e4d54aad7dae0bbb8312ebc6d5685dc335d7d5ed1fec24fd084aaccad8f7f4bed6b0383d12789f6e4f548a0b40d0c7ae7a031efa3e9e37622e6cc1ee25a6276d4406fd4f6948b72f83", 0x33a}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) sendmsg$netlink(r1, &(0x7f0000791000)={&(0x7f0000756ff4)=@proc={0x10}, 0xc, &(0x7f0000713000)=[{&(0x7f00006a9e9c)={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, "", []}, 0x10}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a28fff), 0x0, 0x20008045, &(0x7f00008e2000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) 2018/02/26 09:25:18 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) bind(r0, &(0x7f0000017000)=@sco={0x1f}, 0x8) 2018/02/26 09:25:18 executing program 0: r0 = memfd_create(&(0x7f0000006ff3)='/dev/vcs\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000009000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002c000)={0x0, 0x0, 0x0, 'queue1\x00'}) clock_gettime(0x0, &(0x7f0000285000)={0x0}) write$sndseq(r0, &(0x7f0000040000)=[{0x0, 0x0, 0x0, 0x0, @time={r3}, {}, {}, @addr}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x2e, @tick, 0x0, {0x0, 0x8}}) 2018/02/26 09:25:18 executing program 5: add_key$keyring(&(0x7f0000a0e000)='keyring\x00', &(0x7f0000188000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000bcf000)='syzkaller\x00', &(0x7f00005fcffb)={0x73, 0x79, 0x7a}, &(0x7f0000ec8000), 0x0, 0x0) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f000047c000)=""/4096, 0x1000) 2018/02/26 09:25:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/02/26 09:25:18 executing program 6: r0 = syz_fuseblk_mount(&(0x7f0000ad2ff8)='./file0\x00', &(0x7f0000ab8ff8)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000250000)='./file0\x00', &(0x7f00007f0000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00009b0ffc)=r1) 2018/02/26 09:25:18 executing program 3: getrandom(&(0x7f0000000080)=""/190, 0xbe, 0x3) 2018/02/26 09:25:18 executing program 1: pselect6(0xfffffffffffffef3, &(0x7f00000abfc0), &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/02/26 09:25:18 executing program 4: clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, @ifru_map}) 2018/02/26 09:25:18 executing program 3: getrandom(&(0x7f0000000080)=""/190, 0xbe, 0x3) 2018/02/26 09:25:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/02/26 09:25:18 executing program 5: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000013b000)=[{&(0x7f0000559f24)="580000001400192340834b80040d8c560206f8ff000400000000000000005800004824ca944f64009400050028825a003b7dbe907902008000f0fffefffffe03ed03fff5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) 2018/02/26 09:25:18 executing program 4: mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000000)='.', 0x4) umount2(&(0x7f0000000040)='.', 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:18 executing program 1: clock_adjtime(0x0, &(0x7f000098cf30)={0xfc95}) 2018/02/26 09:25:18 executing program 3: getrandom(&(0x7f0000000080)=""/190, 0xbe, 0x3) 2018/02/26 09:25:18 executing program 2: mq_unlink(&(0x7f0000ce0000)='.GPL[procself{+mime_type{\x00') 2018/02/26 09:25:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) 2018/02/26 09:25:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/02/26 09:25:18 executing program 3: getrandom(&(0x7f0000000080)=""/190, 0xbe, 0x3) 2018/02/26 09:25:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000114ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000386fa0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 2: syslog(0x3, &(0x7f0000930f14), 0x0) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@hci, 0xc, &(0x7f0000000180)=[], 0x0, &(0x7f00000001c0)=""/230, 0xe6}, 0x0) 2018/02/26 09:25:18 executing program 5: r0 = userfaultfd(0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000b60fe8)={0xaa}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000037e000)) 2018/02/26 09:25:18 executing program 1: r0 = open(&(0x7f0000cd8ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000198000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/26 09:25:18 executing program 4: mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000000)='.', 0x4) umount2(&(0x7f0000000040)='.', 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) 2018/02/26 09:25:18 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 2018/02/26 09:25:18 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00005a3ff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000f73ff0)={0x0, 0x0}) ppoll(&(0x7f000004efc0)=[{r0, 0x1301}, {r1}], 0x2, &(0x7f000005bd56)={0x0, r3+10000000}, &(0x7f000005b000), 0x8) timer_settime(0x0, 0x0, &(0x7f000020afe0)={{}, {0x0, 0x9}}, &(0x7f0000001fe0)) [ 60.520775] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:25:18 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 2018/02/26 09:25:18 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[], 0x0, &(0x7f0000000080)=[]}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0)=[], 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x1}], 0x10}}], 0x2, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000114ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000386fa0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000d7000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) 2018/02/26 09:25:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) 2018/02/26 09:25:18 executing program 1: r0 = open(&(0x7f0000cd8ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000198000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0xffff, 0x0, 0x1, 0x4, 0x6}, 0x20) 2018/02/26 09:25:18 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') [ 60.579372] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:25:18 executing program 1: r0 = open(&(0x7f0000cd8ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000198000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/26 09:25:18 executing program 7: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x410003) 2018/02/26 09:25:18 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000ff4)) 2018/02/26 09:25:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000114ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000386fa0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x2, 0x0, @empty}, 0x1c) 2018/02/26 09:25:18 executing program 1: r0 = open(&(0x7f0000cd8ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000198000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2018/02/26 09:25:18 executing program 7: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) getitimer(0x0, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 2018/02/26 09:25:18 executing program 4: mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000000)='.', 0x4) umount2(&(0x7f0000000040)='.', 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:18 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000d7000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) [ 60.636398] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.641852] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 2018/02/26 09:25:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00008e8000)='E', 0x1) ioctl$sock_ifreq(r0, 0x1000080000089f3, &(0x7f0000eacfd8)={@common='tunl0\x00', @ifru_data=&(0x7f00008e7fe0)="01000000090002fbff030100000001000000000000000f000449fbf502007e23"}) 2018/02/26 09:25:18 executing program 2: connect(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 7: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) getitimer(0x0, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000114ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000848ff0)={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f00001c1000)=[{{&(0x7f0000874000)=@can={0x1d}, 0x10, &(0x7f0000dc4000)=[{&(0x7f00004e0f41)="7f", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000386fa0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) recvfrom$packet(r1, &(0x7f0000467000)=""/4096, 0x1000, 0x0, &(0x7f000062c000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty}, 0x14) sendmsg$key(r1, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f0000dd7099)={0x2, 0x0, 0x0, 0x0, 0x56, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 7: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) getitimer(0x0, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), 0x5b4) [ 60.715554] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.730313] audit_printk_skb: 36 callbacks suppressed [ 60.730329] audit: type=1400 audit(1519637118.515:43): avc: denied { create } for pid=9969 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:25:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 7: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) getitimer(0x0, &(0x7f0000000040)) 2018/02/26 09:25:18 executing program 0: r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000a1c000)={&(0x7f0000d1e000)=@in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000037fb0)=[], 0x0, &(0x7f00000b5000)=[{0x10, 0x1, 0x24}], 0x10}, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00006f3ff1)='/dev/sequencer\x00', 0x48002, 0x0) write$sndseq(r0, &(0x7f0000d43000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @addr={0x81, 0x6}}], 0x30) 2018/02/26 09:25:18 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000d7000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) 2018/02/26 09:25:18 executing program 6: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f00000eefe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1) 2018/02/26 09:25:18 executing program 4: mount(&(0x7f000000a000)='.', &(0x7f0000000000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000000)='.', 0x4) umount2(&(0x7f0000000040)='.', 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 2018/02/26 09:25:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00005f5ff7)='/dev/sg#\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl(r0, 0x2283, &(0x7f0000001000)) 2018/02/26 09:25:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, 0x80000003}, {0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x1, @pid}]}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 3: mkdir(&(0x7f0000040000)='./bus\x00', 0x0) mount(&(0x7f0000043ffa)='./bus\x00', &(0x7f0000043ffa)='./bus\x00', &(0x7f0000625000)='ramfs\x00', 0x0, &(0x7f0000043000)) open$dir(&(0x7f0000606000)='./bus\x00', 0x3fd, 0x0) 2018/02/26 09:25:18 executing program 0: r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000a1c000)={&(0x7f0000d1e000)=@in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000037fb0)=[], 0x0, &(0x7f00000b5000)=[{0x10, 0x1, 0x24}], 0x10}, 0x0) 2018/02/26 09:25:18 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x1, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x28, 0x12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@rand_addr}, []}, 0x28}, 0x1}, 0x0) [ 60.785001] audit: type=1400 audit(1519637118.575:44): avc: denied { ioctl } for pid=9969 comm="syz-executor2" path="socket:[24761]" dev="sockfs" ino=24761 ioctlcmd=0x8903 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 2018/02/26 09:25:18 executing program 0: r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000a1c000)={&(0x7f0000d1e000)=@in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000037fb0)=[], 0x0, &(0x7f00000b5000)=[{0x10, 0x1, 0x24}], 0x10}, 0x0) 2018/02/26 09:25:18 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) 2018/02/26 09:25:18 executing program 3: mkdir(&(0x7f0000040000)='./bus\x00', 0x0) mount(&(0x7f0000043ffa)='./bus\x00', &(0x7f0000043ffa)='./bus\x00', &(0x7f0000625000)='ramfs\x00', 0x0, &(0x7f0000043000)) open$dir(&(0x7f0000606000)='./bus\x00', 0x3fd, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f00000eefe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1) 2018/02/26 09:25:18 executing program 2: r0 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x2c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b, []}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 0: r0 = socket(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000a1c000)={&(0x7f0000d1e000)=@in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f0000037fb0)=[], 0x0, &(0x7f00000b5000)=[{0x10, 0x1, 0x24}], 0x10}, 0x0) 2018/02/26 09:25:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x402c542d, &(0x7f0000d26ffc)) 2018/02/26 09:25:18 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000d7000)={@common='gre0\x00', @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) 2018/02/26 09:25:18 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000ff0)={0x0, 0x1c9c380}, &(0x7f0000048ffc), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000003000), &(0x7f0000048000), 0x0) 2018/02/26 09:25:18 executing program 3: mkdir(&(0x7f0000040000)='./bus\x00', 0x0) mount(&(0x7f0000043ffa)='./bus\x00', &(0x7f0000043ffa)='./bus\x00', &(0x7f0000625000)='ramfs\x00', 0x0, &(0x7f0000043000)) open$dir(&(0x7f0000606000)='./bus\x00', 0x3fd, 0x0) 2018/02/26 09:25:18 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) 2018/02/26 09:25:18 executing program 6: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f00000eefe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1) 2018/02/26 09:25:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r0, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:18 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000a98f32), 0x0, 0xcdae, 0x0) 2018/02/26 09:25:18 executing program 6: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f00000eefe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/158, 0x9e}], 0x1) 2018/02/26 09:25:18 executing program 4: r0 = socket$inet(0xf, 0x3, 0x2) bind(r0, &(0x7f0000000000)=@un=@abs, 0x0) 2018/02/26 09:25:18 executing program 2: r0 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x2c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b, []}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 3: mkdir(&(0x7f0000040000)='./bus\x00', 0x0) mount(&(0x7f0000043ffa)='./bus\x00', &(0x7f0000043ffa)='./bus\x00', &(0x7f0000625000)='ramfs\x00', 0x0, &(0x7f0000043000)) open$dir(&(0x7f0000606000)='./bus\x00', 0x3fd, 0x0) 2018/02/26 09:25:18 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) setpriority(0x0, 0x0, 0x1) mq_timedreceive(r0, &(0x7f00008b8f2f)=""/209, 0xd1, 0x0, &(0x7f0000336ff0)={0x77359400}) mq_timedreceive(r0, &(0x7f00003d4000)=""/224, 0xaf, 0x0, &(0x7f0000f577fa)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/02/26 09:25:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000073fe8), 0x0, 0x8, &(0x7f00005e4000)) 2018/02/26 09:25:18 executing program 2: r0 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x2c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b, []}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000ff0)={0x0, 0x1c9c380}, &(0x7f0000048ffc), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000003000), &(0x7f0000048000), 0x0) 2018/02/26 09:25:18 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000aab000)='illinois\x00', 0x9) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="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", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:25:18 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) 2018/02/26 09:25:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, &(0x7f0000481000), &(0x7f0000835000)=0x4) 2018/02/26 09:25:18 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000012000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001dffd)=0x2) 2018/02/26 09:25:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9), 0x8) 2018/02/26 09:25:18 executing program 2: r0 = socket(0x10, 0x200000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000504000)={&(0x7f0000ba2ff4)={0x10}, 0xc, &(0x7f0000434ff0)={&(0x7f0000e55d20)=@newlink={0x2c, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@IFLA_GROUP={0x8, 0x1b}, @IFLA_XDP={0x4, 0x2b, []}]}, 0x2c}, 0x1}, 0x0) 2018/02/26 09:25:18 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000aab000)='illinois\x00', 0x9) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="3003aea780fbcc78d2da94cbec5c378b480651b17f469f2555aad3ec51873e578f5ab3f6bf74188b011e265e225cd7f0119b082769ef525aed53732324aab48958856dad055ebb0f4a099af4a10bcb138f32ac410e14c3c9964dd8a6cfde808824607973c004e3429e3911e9c87f67543d97d150e960b895a55f45f65cfcc9647c13b1b8e78ef37375146e49570d0e0ba0263a523833931f6f1f40aff84e19225e7e3e44282b3a2c5711f31f1ac1ce03e8474a2bfe89da46e865301049010f0019ccdef177fbfe1dfb700b9be65470e77ce2c71009a1123046b2d977706282fd7e19e14511cd6bed8eb2722fde57504beafd9067f0d76addc432343ee639ccbbff542292b40155d254dda717e090a0e0cb1d2a5c05761b599189b195f9615269787500b8dd2359bd70ae6499091e2035bfd2b372b6b08bbd397b1d0525e91c51cd803e8798e6d3e82274b533505f74b6e0903a400050c10e31c996c1cc09c787503b03afce37aa23ceeaabc3b5", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:25:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4)=[], 0x0, 0x0, &(0x7f0000002000)}) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000e5e000)='./file0\x00', 0x0) dup2(r0, r1) 2018/02/26 09:25:18 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000ff0)={0x0, 0x1c9c380}, &(0x7f0000048ffc), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000003000), &(0x7f0000048000), 0x0) 2018/02/26 09:25:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000012000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001dffd)=0x2) 2018/02/26 09:25:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000000fca), 0x0) 2018/02/26 09:25:19 executing program 2: timerfd_create(0x8, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000aab000)='illinois\x00', 0x9) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="3003aea780fbcc78d2da94cbec5c378b480651b17f469f2555aad3ec51873e578f5ab3f6bf74188b011e265e225cd7f0119b082769ef525aed53732324aab48958856dad055ebb0f4a099af4a10bcb138f32ac410e14c3c9964dd8a6cfde808824607973c004e3429e3911e9c87f67543d97d150e960b895a55f45f65cfcc9647c13b1b8e78ef37375146e49570d0e0ba0263a523833931f6f1f40aff84e19225e7e3e44282b3a2c5711f31f1ac1ce03e8474a2bfe89da46e865301049010f0019ccdef177fbfe1dfb700b9be65470e77ce2c71009a1123046b2d977706282fd7e19e14511cd6bed8eb2722fde57504beafd9067f0d76addc432343ee639ccbbff542292b40155d254dda717e090a0e0cb1d2a5c05761b599189b195f9615269787500b8dd2359bd70ae6499091e2035bfd2b372b6b08bbd397b1d0525e91c51cd803e8798e6d3e82274b533505f74b6e0903a400050c10e31c996c1cc09c787503b03afce37aa23ceeaabc3b5", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:25:19 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000ff0)={0x0, 0x1c9c380}, &(0x7f0000048ffc), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000003000), &(0x7f0000048000), 0x0) 2018/02/26 09:25:19 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000148000)={@common='gre0\x00', @ifru_flags=0x2002}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000007fe9)={@common='gre0\x00', @ifru_map={0x1ff}}) 2018/02/26 09:25:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa000000001) r1 = dup(r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/02/26 09:25:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000518f80)=""/128, 0x80}, {&(0x7f00006d1000)=""/147, 0x93}], 0x2, 0x0) 2018/02/26 09:25:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') sendfile(r0, r0, &(0x7f000080dffc)=0x8000005, 0xb) 2018/02/26 09:25:19 executing program 3: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 2018/02/26 09:25:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe2000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x80000000, 0x0, 0x20000000002, 0x1}, 0x20) 2018/02/26 09:25:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000012000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001dffd)=0x2) 2018/02/26 09:25:19 executing program 0: mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 2018/02/26 09:25:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000039cfe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x0, []}, &(0x7f0000000480)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000588ff0)=@syzn={0x73, 0x79, 0x7a, 0x0}, 0x10) sendfile(r0, r2, &(0x7f00008bf000), 0x100420) 2018/02/26 09:25:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2a) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/26 09:25:19 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000272000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000fac000)={0x0, 0x2}) 2018/02/26 09:25:19 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f000002cff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) write(r0, &(0x7f000002d000)="e0", 0x1) preadv(r1, &(0x7f0000001ff0)=[{&(0x7f0000000f15)=""/235, 0xeb}], 0x1, 0x27ffffffd) truncate(&(0x7f0000035ff4)='./file0/bus\x00', 0x4) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x3, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x35f) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000247000)={&(0x7f000058cfc6)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f0000a57fe0)=[{&(0x7f0000786000)="43c552ade9499f006b837d34e3d59b5e2b05d0f1fb5cd3a933bbe36d13b79f3e297ec03e39f5c78a098e87104eefbe48d4ebefbd25aeff6015522455e1752492b914e6c9cfdba4876af4a110543d98ea7adb436387a4c9e140c18d8085e7c93ba89bc871b0e6c95a53aba09bba817fb29ebaf4d276f6b4042bed7b7a31e439df237ac88120e38e6b466bae4ca0b9c44478abbb7fc744ae4a4942b7969c43d4d5fc2a48f8f6baf9182def6950d631d898bc000952396e6e4b8a796431b75a7ecfbce48ccc294baed5d8f71d1deae7d2c6d0868f7919a5677ec01ac04bb53707346813", 0xe2}], 0x1, &(0x7f0000f88f80)=[]}, 0x0) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000aab000)='illinois\x00', 0x9) sendmsg(r1, &(0x7f0000147fe4)={&(0x7f0000810000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a, &(0x7f000026e000)=[{&(0x7f0000f20000)="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", 0x16d}], 0x1, &(0x7f0000ae2bf0)=[]}, 0x5) 2018/02/26 09:25:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r0, &(0x7f000000f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:25:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000012000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5407, &(0x7f000001dffd)=0x2) 2018/02/26 09:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200001, 0x10000031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={@common='ipddp0\x00'}) 2018/02/26 09:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200001, 0x10000031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={@common='ipddp0\x00'}) 2018/02/26 09:25:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200001, 0x10000031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={@common='ipddp0\x00'}) 2018/02/26 09:25:19 executing program 3: mkdir(&(0x7f000056b000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000e3dff8)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x0, 0x0) 2018/02/26 09:25:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200001, 0x10000031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={@common='ipddp0\x00'}) [ 61.353547] [ 61.355225] ====================================================== [ 61.361523] [ INFO: possible circular locking dependency detected ] [ 61.367911] 4.9.84-ga9d0273 #52 Not tainted [ 61.372211] ------------------------------------------------------- [ 61.378594] syz-executor5/10138 is trying to acquire lock: [ 61.384197] (&mm->mmap_sem){++++++}, at: [] __might_fault+0xe4/0x1d0 [ 61.392703] but task is already holding lock: [ 61.397347] (ashmem_mutex){+.+.+.}, at: [] ashmem_ioctl+0x371/0xfe0 [ 61.405728] which lock already depends on the new lock. [ 61.405728] [ 61.412708] [ 61.412708] the existing dependency chain (in reverse order) is: [ 61.420296] -> #1 (ashmem_mutex){+.+.+.}: [ 61.425049] lock_acquire+0x12e/0x410 [ 61.429339] mutex_lock_nested+0xbb/0x870 [ 61.433979] ashmem_mmap+0x53/0x400 [ 61.438094] mmap_region+0x7dd/0xfd0 [ 61.442295] do_mmap+0x57b/0xbe0 [ 61.446153] vm_mmap_pgoff+0x16b/0x1b0 [ 61.450530] SyS_mmap_pgoff+0x33f/0x560 [ 61.454995] do_fast_syscall_32+0x2f5/0x870 [ 61.459807] entry_SYSENTER_compat+0x90/0xa2 [ 61.464700] -> #0 (&mm->mmap_sem){++++++}: [ 61.469541] __lock_acquire+0x2bf9/0x3640 [ 61.474182] lock_acquire+0x12e/0x410 [ 61.478472] __might_fault+0x14a/0x1d0 [ 61.482849] ashmem_ioctl+0x3c0/0xfe0 [ 61.487137] compat_ashmem_ioctl+0x3e/0x50 [ 61.491863] compat_SyS_ioctl+0x15f/0x2050 [ 61.496586] do_fast_syscall_32+0x2f5/0x870 [ 61.501399] entry_SYSENTER_compat+0x90/0xa2 [ 61.506292] [ 61.506292] other info that might help us debug this: [ 61.506292] [ 61.514400] Possible unsafe locking scenario: [ 61.514400] [ 61.520422] CPU0 CPU1 [ 61.525055] ---- ---- [ 61.529689] lock(ashmem_mutex); [ 61.533345] lock(&mm->mmap_sem); [ 61.539598] lock(ashmem_mutex); [ 61.545768] lock(&mm->mmap_sem); [ 61.549509] [ 61.549509] *** DEADLOCK *** [ 61.549509] [ 61.555538] 1 lock held by syz-executor5/10138: [ 61.560173] #0: (ashmem_mutex){+.+.+.}, at: [] ashmem_ioctl+0x371/0xfe0 [ 61.569103] [ 61.569103] stack backtrace: [ 61.573569] CPU: 0 PID: 10138 Comm: syz-executor5 Not tainted 4.9.84-ga9d0273 #52 [ 61.581153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.590478] ffff8801cafb7a38 ffffffff81d956b9 ffffffff853a2cd0 ffffffff853a2cd0 [ 61.598447] ffffffff853c2f80 ffff8801c12f38d8 ffff8801c12f3000 ffff8801cafb7a80 [ 61.606438] ffffffff812387f1 ffff8801c12f38d8 00000000c12f38b0 ffff8801c12f38d8 [ 61.614400] Call Trace: [ 61.616957] [] dump_stack+0xc1/0x128 [ 61.622291] [] print_circular_bug+0x271/0x310 [ 61.628404] [] __lock_acquire+0x2bf9/0x3640 [ 61.634347] [] ? avc_has_extended_perms+0x3fc/0xf10 [ 61.640982] [] ? avc_has_extended_perms+0xe2/0xf10 [ 61.647533] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 61.654525] [] ? mark_held_locks+0xaf/0x100 [ 61.660465] [] ? mutex_lock_nested+0x5e3/0x870 [ 61.666668] [] ? __lock_is_held+0xa1/0xf0 [ 61.672432] [] lock_acquire+0x12e/0x410 [ 61.678028] [] ? __might_fault+0xe4/0x1d0 [ 61.683796] [] __might_fault+0x14a/0x1d0 [ 61.689478] [] ? __might_fault+0xe4/0x1d0 [ 61.695242] [] ashmem_ioctl+0x3c0/0xfe0 [ 61.700833] [] ? selinux_file_ioctl+0x355/0x530 [ 61.707119] [] ? selinux_capable+0x40/0x40 [ 61.712977] [] ? get_name+0x250/0x250 [ 61.718394] [] ? umount_tree+0x9/0x8c0 [ 61.723900] [] ? __fget+0x231/0x3b0 [ 61.729145] [] ? __fget+0x47/0x3b0 [ 61.734305] [] compat_ashmem_ioctl+0x3e/0x50 [ 61.740332] [] compat_SyS_ioctl+0x15f/0x2050 [ 61.746361] [] ? ashmem_ioctl+0xfe0/0xfe0 [ 61.752131] [] ? do_ioctl+0x60/0x60 [ 61.757378] [] do_fast_syscall_32+0x2f5/0x870 [ 61.763489] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.770124] [] entry_SYSENTER_compat+0x90/0xa2 2018/02/26 09:25:19 executing program 3: mkdir(&(0x7f000056b000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000e3dff8)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x0, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965), 0x0, 0x48000, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f2cf5a), 0x0, 0x0, &(0x7f0000b52000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r0, &(0x7f000000f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:25:19 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) renameat(r0, &(0x7f000093f000)='./file0\x00', r0, &(0x7f000010bff2)='./file0/file0\x00') 2018/02/26 09:25:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2a) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/26 09:25:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2a) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/26 09:25:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r0, &(0x7f000000f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:25:19 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) renameat(r0, &(0x7f000093f000)='./file0\x00', r0, &(0x7f000010bff2)='./file0/file0\x00') 2018/02/26 09:25:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965), 0x0, 0x48000, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f2cf5a), 0x0, 0x0, &(0x7f0000b52000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:19 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2a) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965), 0x0, 0x48000, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f2cf5a), 0x0, 0x0, &(0x7f0000b52000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:19 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) renameat(r0, &(0x7f000093f000)='./file0\x00', r0, &(0x7f000010bff2)='./file0/file0\x00') 2018/02/26 09:25:19 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006a2000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) renameat(r0, &(0x7f000093f000)='./file0\x00', r0, &(0x7f000010bff2)='./file0/file0\x00') 2018/02/26 09:25:19 executing program 3: mkdir(&(0x7f000056b000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000e3dff8)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x0, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000a77965), 0x0, 0x48000, &(0x7f0000e3efe4)={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f2cf5a), 0x0, 0x0, &(0x7f0000b52000)={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 09:25:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000030000)={&(0x7f0000000000)={0x10}, 0x281, &(0x7f0000000500)={&(0x7f0000030fdc)=@ipv4_newroute={0x24, 0x18, 0x1f, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r0, &(0x7f000000f000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000f6a000)={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/02/26 09:25:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0xffffffffffffffff, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f000096dff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000030000)={&(0x7f0000000000)={0x10}, 0x281, &(0x7f0000000500)={&(0x7f0000030fdc)=@ipv4_newroute={0x24, 0x18, 0x1f, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:19 executing program 1: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000974ff8)='./file0\x00', &(0x7f0000cf6ff8)='./file0\x00', &(0x7f000022f000)='mqueue\x00', 0x0, 0x0) 2018/02/26 09:25:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000030000)={&(0x7f0000000000)={0x10}, 0x281, &(0x7f0000000500)={&(0x7f0000030fdc)=@ipv4_newroute={0x24, 0x18, 0x1f, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 1: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000974ff8)='./file0\x00', &(0x7f0000cf6ff8)='./file0\x00', &(0x7f000022f000)='mqueue\x00', 0x0, 0x0) 2018/02/26 09:25:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000030000)={&(0x7f0000000000)={0x10}, 0x281, &(0x7f0000000500)={&(0x7f0000030fdc)=@ipv4_newroute={0x24, 0x18, 0x1f, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14}}]}, 0x24}, 0x1}, 0x0) 2018/02/26 09:25:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 1: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000974ff8)='./file0\x00', &(0x7f0000cf6ff8)='./file0\x00', &(0x7f000022f000)='mqueue\x00', 0x0, 0x0) 2018/02/26 09:25:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:19 executing program 3: mkdir(&(0x7f000056b000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000e3dff8)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x0, 0x0) 2018/02/26 09:25:19 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x3ff, 0x0, 0xd, 0x0, 0x7, 0x3, [@sadb_x_nat_t_port={0x1, 0x16, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in6=@dev={0xfe, 0x80, [], 0x0, 0x15}, 0x6, 0x4, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xc}}, @in={0x2, 0x1, @broadcast=0xffffffff}}]}, 0x68}, 0x1}, 0x40000) 2018/02/26 09:25:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:19 executing program 1: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000974ff8)='./file0\x00', &(0x7f0000cf6ff8)='./file0\x00', &(0x7f000022f000)='mqueue\x00', 0x0, 0x0) 2018/02/26 09:25:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f00007d9000), 0x0, 0x20008004, &(0x7f0000ee7000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001}, 0x10) 2018/02/26 09:25:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000005540)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="bd242e1d2fb6"}, 0x10, &(0x7f00000001c0)=[], 0x0, &(0x7f0000000200)=[{0x100c, 0x116, 0x2, "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"}, {0x100c, 0x101, 0x5, "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"}, {0x100c, 0x119, 0x8, "99cbd327d361fb0b511e754d987e60e98d1e9b54fece160e493b56c25c27d7fb2e812c9e8ff109005531b79441960e46ae49cc12ff7dba58ffaa128b8cdae6f11c05dba6cff51177b51560fadae9801460512654e1a8d3a636ba3391a396b5e91391456643daa3d94ecd28555e64bf0c2bc0e25e9c99dabadd9a3bef98b2a3f0575b07d268cd2b939e10cc577f0bc6d610496caed1fe6addcaf2be10161661d4914a8289433ac92c223a6dde72e92fdf86cfd146b19b05bc940793f445602adf3394cb4c8c39f29711c3893c25de0f6d9ca94182acd8b8f73c5a1dacf7839e1800cf772deb8948e44a303b7a722543cafdb134b77413148b4f37c190bde05af09271739a8b313e2f3d302299ee4199cebbc5c0d4c5ff971d0a4218b0e9b0c635e3d0651e06b521c4863a6a9d6a8cfae3491359393d00b582f02cbb75fbb2e32ab3308717b3680483e57ca147b6258d59f6156db76ec50cae1136ab3ace24740560ee4eb5ee8a7d52f25c27773f263999f1735c4d2fd63a9931dbf1841ebbd897a1d74c0ee46c909a580afaad4374d53d01d41e89dc2e7e93fb97405a0f3a37b3c597d5d1a0ff8a0038160dcd07a4058cbd24770e4cf452aecf8e8bcf6fa7d5d4ce83e91c29d8196ee0e5bb01e5d9310d2961f028a3f7bac8116a7ac7d34aa0bc53b8c37c12d192d5f64ab04c3abfa33089debbdcc80bc18949d7d1307f5a55798ddb026d225e3d08de01db2090a60aba08a8fe5768e1e069123ce5c6cf25bb1bcf845d4e652ec31b2862d1d3338ef2ede31d53385046a55434ee1bb6748c3cee831c895664d01474fd6da3382efed9e9b03ee57069231754f19496ee58934f2724ca3d40196ad15dcd868444b92e0e0224fc434c830499c68e481e849e1621671b1d12ec3f39d790cae870331b2d0287e06de94b8b9fc590446a9686882965f243dd7aed7feda533a95b911a44904e9804ecebb77a73a6c0ba6ca8b063bd8e191d028abae8efcea07bf8e4ea332eb30095b1e186b60492f6081bd453b489ca8969313459f5cf8b59d8ddc2f9d29921b105c066947a7cae5cc8b45ac6629b94347a0b68fe179238e3c3b6b64319ae3adb485e22b409271ad10f72f52180bb863d4fd3f58a905b78f22d9b790ba4df9258c5110609271d260076450fc857d1a6f2bc5b4a3fc2982aef8470688ddcb75639a0b8d4fe6a795c64abbefe601988ef6b5b24d871a1a8525584132d8530f1620aece59e0240b087dba0e6376df57f64f1d2891a4a02a4c81f01f8e6891099fa6a7b745750edf4bbc7bc865e6ce5fe57b5b868849db38f22aa0de5b24cac16825c08b094e9b28b9cb66a55965f3fb995ae8652a1da42f8c6981ce1e3e7d69c577f8d7a50b9912388ff7c6d7c02a50cc654d8e2bfc6f3479eea0103c817c88ac6cc5d87ba1187736287f01838d133094ce648db920794057ce773d582626b67275159f21ab4f3694008724f8525ebee83085f327a4c8d2295fab7ca74dbfbb2c8b09f40fc98824a248a5ca7624c55449be611888d18dab9f31c4a26914988fa0130d17837134b832273c656a0e7e83231e315a326f65ca8823b6587df8e072342f714597b4153821265926ad9fdabec0d318e4933033103ccaf3d71b96afce76d470e25c26b90a7f9fd0d1caf5b154c877d8605cbbc200269b93460bf8c6abee808f39ed8eec0cbe4133fa4d40adffb3da62646f0ae5384e96a3dee994f8e4dbbbaaac99f24dedbbf55e13b6682fef704729d9f6690f368b453e8eda0972fa793a7c2c12d4b65b8d7e255978a51402d7d0aa9d87439fe2da70ce381337d6281a251d234930d7a3ac536541b86e61ff9814553e3ad02a4c10abc005639b9549fef18b940b831501f199e158b1e2864c63b31e1d399f1670da3fd681ea034e676f5a1a7781c08958916bbd1a4edf4e41c2f7c3b39764ea68367e52a7d99ba96220e794138582f1e767a91ad5ba8604a8d6192cb09e40b9dcb743f010b757edd3e44d24395535a21570343f54d3a113ca3da29a259658403bb977d6d76aa8c126b8628365a0336367d66157833c0d814592a432ccb107997132168276d2905fc41062a8bc548315edb5f8a50745b8fcff23f8d44c513a1c8a7fac04dc7c4761bf86180e6f4f05484ae3070da47598696875c4b0f475fe1db8762e5c807e33667c38986ba3dc127c59be4116179e17336f83028a4730ed50540d2e21837035d8376790ebfa49d3e262dc1862a7d59dec51af4c7fa7907ab78ef0a1aa2dea3e6b32b9299b89ce42065ca959416a0f0d43e335d3e7c397fb00d117089915306585c0c6d896f55ee6ab8e68cd935afa285a8192b6dabbc84e552b470315c2236a413123d01d2c7a16656c155d0e66358cac27925555ad0ad2d1414744d698696c20c3ed3aca1da6db008262e5ed30e5d92be444f9ccc5c515fdfb8b8cc9c57c2c7fc57513e9ca70d63fba979b3d3006ad4f109739574bfc979342b8b9dfc0adf58773c394eb30630a449c1a408dcfd22d9c3a376e885b2b11156ee6865d199d3c3457f8f4feae73520adbf9aa2899d12c332a56ab0ccabec14abaf0621fffbc86fc0f1b2dbf24497edb1c496b31e7eba025487e816ae263490a7da81aa73ca14898658c2b68828c46c6450d15fb22c2fe41430353b712dd6e34e0dd67816491e5256e0842f720f47f9ebd348c4a518392652dd52c16c1c58922cc2a38c306f68f6249732e4ae64edd5056b5386bd7b4a9a6a4f441fd46bb90874fabfbdef87983e41b81acccd76d942b62ad045f2567b7bde3cbb0fe618291333700c59db6dc8f3b5ccbd91d5248b70d55949662745b80c555ee91c4780b3aa2e70e87abe487e481336dcb62bc71aead1386e80ea361c1bfb5166dca7188b345fe03f127e868a35454acbad4288e9e78ebc03e0989172e81d6fc2bc1bfa60cd33ce28c10fb3a20e0539cff57514dc4bf00b3a56965b8a9862007ff6a006e56095ab84e37be3f5d5fbb608cf0b9e7ab93fd74b5bf1cd51ab10e2a4d1fde80aa0f3c7359a66956296a79eb6f07932559c7f321e38f1f7bd544b860929a381e54c3abdb661fca975bc9ccbec1265095a7ec0ed49cd09894e2e11195f2c5db50f66c40f86f5646162fec5fce8fdbcb98c1fd2098ed55ee05bd7719ef697064c27e75427b46198f9afd7884bc52a64d483e1fabf4a41087ef3710de03a694d590add24468ba6885ee9cb1e925fbce3e8e7096c8440cfde171341c1388b3687d8f52efe4585d80781f92859cffe08b615c9945a8e3f1320db19487994e6980994e7c89f47889f385a596f406ead5f64295d5c76ad82fbc27988941878ce44b53e8e11767ba8366175b401d59b4e33fcd1ab2f223ab461e19dbdb878729e8d82bcafd1a7a73d1cf4c490962ba0328fb83308b75f8e69bf377959943b114e829c6547004c85541e33ba667e46fd62fc6d3b6f9610d071d4e0b6abca4485e19a389a9a01584198bd981e12d487d3d0e755222173b6966f38219345762efb37592a929dda2ca981a41f7d33b1b8f6ce69a64d4612ba9deb5a79d21f01b5da0d3146bd67afa39e4c7ab0717518093fc5e8cd3b2f0f4978cc4921d3f9531b63b134279df15b032b423056765554f9db0458ad611bac59ce8a782f82fdd86415dee421df28fc0466e71b81e9cfcf153726bbbd9404bd22e8adb0e5f066aecd2a8af5e017d38ccc5f27404441c19bcaf42ff90bcf296049e5fc936d7d90af533b78f64c88050a10614d32e86bd20202441fe1166ba33e8dab87d6ad67adad05ed5c4e8919003c8688507872da875ecd0b07c39778b0370c86dcea79be53c87ec6f30303529b054295b4edb8d58ba7814c55ec39b354d9d9a49c898ae9ca23b72ca5cdd05fc2153aec30d6ce842aed15e5ebb08c7f2f1d0d4ae1739bdcd17e38c11f71eb8c9a81d070fee803ef8fbccca1ec723ba13b279dec6b5604fe9f8631686c229ddda1f41fd06d30aa83d1bf4f03606eeeb4bcc4649200a110b24ec7f3f0720ba5d54870d30d302371de5a8524293f43b9a4c123bc4ea7f099745bddaf4fa07315c7722903ae8e360ecebc85402ce66eddc72040110d2f0558578383d3552bb7d201fe27a5cfbe031466a5ea7f51442e0b151c5f984f746d0e02b44c97e9dc2876fd344285164bbf3007d6ed1bb24dc077e67677e9088313f2fa6f9fd79c4fbd02268a27b3b4bc3e5f2dc02864ccf9f0d4ae82bd3ff6f7968a758e041920dad7a9e884fc8017c0914e1a7ff5c3eabb5e01d91722a4a4ab684f271966ff63688716d4807ca26168152e025a187b9bbe8cac5b22ab514245df9eafb9d342ae3b250dd5a2946935aa047417d3265a0250c245bf51588a8e088fc4f0f900ba875d8a018b8ee86de6361f1e446406bdc1591958ece7020dbf68aaf691e00f60315b8600205465c109c958610e8c641d74376eaf45d7bca1cff8b0090721d7e8f2610d0bcf23246b533e857caeac7d5ed8aed818eead58f63047ed86113e0a005d36650e341220c6806af657ded1ca83bda59abd7abb572b32c630b097b5a317a6a82dd84b7243d71149c854b495399406965b8d2b86d30caf482abbf0dd1463dcc24578d9b9921f8c28df025d7791483801f0434d2612a708ed6ef8fbc885e32038447702159eaaf41c1d43d685e77207270000c60c8c027f4ce2d381cbd8de6f9ec1df48606440062ffdb42a563a20979b74d961af7c3905bf34ee3f3a8a52ffd0202107d48c44bb64d713efde0ee6a537ea0a30a99c334f59d2fcefc29dc8dd3345a5f36db8730ca76b99854eacb04da397273c48f1522d5fcd570195becc8a97d54b5139f68c0fffa333dbc671db49604fc1c89387b66cf44f38ca759f6dd1e354ae615f80652753b8cce09763343fa1ef0ad057ce6f6e70036ab2bb81192431bb612fa4be05ba69d4fe6c1df6d0fd1485f5f98b84510616a11fd837688fbfbe695c8b532ba2cab35c9061db5d66a80bcd5a943952e194fa37e1b6a90f7a256078ee788fab28f2c81e75cee8e43830e1b02aee7affa72e070e18b2765d83c2c42a268aedbf41bfbdab1094a92fa5d75f737061059f5a379cba72432e705afa6f445d5e5d3094f9970d4f6e34fe750d5ed1fa392a7930f023b3ff2c55dd724e2d4ebe8bac4bfe9b6487d456083e388669dfa0c79ebffab9eb461b5359905bec73b06dcad1b227fc32d4e42b28f0c01d4cdc949da9c384959ec4932ddb80f838d461db50b0006eed8b13939cd03361c6ea3c4095636d40cdd1494aaceff8948fc5a1105e3518d838c6d212f717d8f65192e00038ec468dfd6a72dc204406e9310b2055181df6d78f8c924fcc5596413e98d7580ae4495ce9b8396ecf6bdbba9c0d1a016db5ffd24c8a5215b3802dcd20bf1ef2a9cfbbdeee2278b62b71008ae05eb9fb9d315110f1f65cc3adeb0b631a1d5255ad5dfa6f89e9789ceea80d0c671dd74d29f3252c83179f17ead477a85cebb2918470043881688f0817f3171ead52d5d410d8d56d4c0d678a8513c7e59a4f2d14ca17afca4a7e3809a02fe6add7484828002cdfc62ab7a070728d7928f6614c121c460ab7e63020131eb67bf0903e6de46929ee7ee96cb2b3723cc2263022de9284ede350c7bf870355399811940b902fae4ed779e7396acf9859a0463726ecde594f874637051ed4a7b6e3628d27de31392f78558da09e4da2911f4f4981cde8e8a0d463ccdec45dc56cc26724924638b78a4970afa284190632a01a5c8b17ea593c246d4350f404d1349a51fedb21"}], 0x3024, 0x8040}, 0x0) 2018/02/26 09:25:20 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000aa5ff8)=@abs={0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000059affc)=0x1c, 0x4) connect$unix(r0, &(0x7f00009c8000)=@abs={0x1}, 0x8) 2018/02/26 09:25:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001000)={0x1, &(0x7f000000a000)=[{0x6}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000005ff0)={0x1, &(0x7f0000007ff8)=[{0x6}]}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x227b, &(0x7f0000300000)) 2018/02/26 09:25:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fd8)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}]}, 0x28}, 0x1}, 0x0) 2018/02/26 09:25:20 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) 2018/02/26 09:25:20 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/115, 0x73) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:25:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x0, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000219fe4)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000edc000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/115, 0x73) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) dup2(r0, r1) 2018/02/26 09:25:20 executing program 5: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x400}, {0xfffffffffffffffc, 0x4}, @result={0x8, 0xfffffffffffffe00}}], 0x1c) 2018/02/26 09:25:20 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/115, 0x73) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:25:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') r1 = epoll_create(0x0) poll(&(0x7f0000856ff0)=[{r1}, {r0}], 0x2, 0x9b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b58ff4)) mkdir(&(0x7f0000b08ff8)='./file0\x00', 0x0) mount(&(0x7f000097fff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) mount(&(0x7f0000b44ff8)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x9022, &(0x7f000097bfff)) 2018/02/26 09:25:20 executing program 7: sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:25:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 5: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x400}, {0xfffffffffffffffc, 0x4}, @result={0x8, 0xfffffffffffffe00}}], 0x1c) 2018/02/26 09:25:20 executing program 7: sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:25:20 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/115, 0x73) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/02/26 09:25:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x0, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000219fe4)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000edc000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:20 executing program 6: lookup_dcookie(0x0, &(0x7f0000001000)=""/113, 0x71) 2018/02/26 09:25:20 executing program 7: sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:25:20 executing program 7: sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 2018/02/26 09:25:20 executing program 5: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x400}, {0xfffffffffffffffc, 0x4}, @result={0x8, 0xfffffffffffffe00}}], 0x1c) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f00008aa000)=[{r0}], 0x1, 0x431b8446) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f000097f000), 0x4) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x8, 0x9}, {}]}}) 2018/02/26 09:25:20 executing program 5: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick, {0x0, 0x400}, {0xfffffffffffffffc, 0x4}, @result={0x8, 0xfffffffffffffe00}}], 0x1c) 2018/02/26 09:25:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x8, 0x9}, {}]}}) 2018/02/26 09:25:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x0, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000219fe4)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000edc000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x8, 0x9}, {}]}}) 2018/02/26 09:25:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x8, 0x9}, {}]}}) 2018/02/26 09:25:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f00008aa000)=[{r0}], 0x1, 0x431b8446) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f000097f000), 0x4) 2018/02/26 09:25:20 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) openat(r0, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r0, &(0x7f0000448000)='./control\x00', 0x200) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') 2018/02/26 09:25:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa}, {}, {}, 0x0, 0xffffffffffffffff, 0x80000001}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x0, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000219fe4)={0x0, 0x0, &(0x7f0000415ff8)={&(0x7f0000edc000)={0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000bd2000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) 2018/02/26 09:25:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/02/26 09:25:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005408, &(0x7f0000299ffa)) 2018/02/26 09:25:20 executing program 6: r0 = gettid() getpriority(0x10000000001, r0) 2018/02/26 09:25:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 6: r0 = gettid() getpriority(0x10000000001, r0) 2018/02/26 09:25:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 2: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) openat(r0, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r0, &(0x7f0000448000)='./control\x00', 0x200) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') [ 62.857132] IPv4: Oversized IP packet from 127.0.0.1 [ 62.875007] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f00008aa000)=[{r0}], 0x1, 0x431b8446) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f000097f000), 0x4) 2018/02/26 09:25:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) 2018/02/26 09:25:20 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) openat(r0, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r0, &(0x7f0000448000)='./control\x00', 0x200) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') 2018/02/26 09:25:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xb37, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:20 executing program 6: r0 = gettid() getpriority(0x10000000001, r0) 2018/02/26 09:25:20 executing program 2: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 6: r0 = gettid() getpriority(0x10000000001, r0) 2018/02/26 09:25:20 executing program 2: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000821000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000d61fb0)={{}, {0x12}}) 2018/02/26 09:25:20 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) mkdir(&(0x7f0000839000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000d4000)='./control\x00', 0x0) openat(r0, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r0, &(0x7f0000448000)='./control\x00', 0x200) rename(&(0x7f00000f2ff8)='./file0\x00', &(0x7f0000ab5ff6)='./control\x00') 2018/02/26 09:25:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000b8fe4)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000509f92), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) 2018/02/26 09:25:20 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000416000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@generic="dbaef88b9d97df634b457e43aeb54bc3", @ifru_ivalue}) 2018/02/26 09:25:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xb37, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) [ 62.976052] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f00008aa000)=[{r0}], 0x1, 0x431b8446) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f000097f000), 0x4) 2018/02/26 09:25:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 2018/02/26 09:25:20 executing program 4: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xb37, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) 2018/02/26 09:25:20 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) 2018/02/26 09:25:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xb37, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r1}, []}, 0x20}, 0x1}, 0x0) [ 63.014044] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:25:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001fff8)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000023000)={@syzn={0x73, 0x79, 0x7a, 0x0}}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800090400000000000000000a00000000000000000000000c00090008000000", @ANYBLOB="140005002f36a16f49c605310000000000000001"], 0x2}, 0x1}, 0x0) 2018/02/26 09:25:20 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 2018/02/26 09:25:20 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 2018/02/26 09:25:20 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ff0)='/selinux/status\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) 2018/02/26 09:25:20 executing program 4: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 1: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 2018/02/26 09:25:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 2: mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x55032, 0xffffffffffffffff, 0x4000) ppoll(&(0x7f0000004fc8)=[], 0x0, &(0x7f0000004ff0)={0x0, 0x989680}, &(0x7f0000000000), 0x8) 2018/02/26 09:25:20 executing program 4: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:20 executing program 1: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ff0)='/selinux/status\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) [ 63.044175] IPv4: Oversized IP packet from 127.0.0.1 [ 63.045230] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:20 executing program 2: mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x55032, 0xffffffffffffffff, 0x4000) ppoll(&(0x7f0000004fc8)=[], 0x0, &(0x7f0000004ff0)={0x0, 0x989680}, &(0x7f0000000000), 0x8) 2018/02/26 09:25:20 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ff0)='/selinux/status\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) 2018/02/26 09:25:20 executing program 1: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 4: accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 2018/02/26 09:25:20 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ff0)='/selinux/status\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) 2018/02/26 09:25:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:20 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000265fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000086a000)=@ethtool_cmd={0x2b}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:20 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) [ 63.105602] IPv4: Oversized IP packet from 127.0.0.1 [ 63.109014] IPv4: Oversized IP packet from 127.0.0.1 [ 63.124213] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:25:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 2: mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x55032, 0xffffffffffffffff, 0x4000) ppoll(&(0x7f0000004fc8)=[], 0x0, &(0x7f0000004ff0)={0x0, 0x989680}, &(0x7f0000000000), 0x8) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:21 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000265fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000086a000)=@ethtool_cmd={0x2b}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:21 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 2: mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x55032, 0xffffffffffffffff, 0x4000) ppoll(&(0x7f0000004fc8)=[], 0x0, &(0x7f0000004ff0)={0x0, 0x989680}, &(0x7f0000000000), 0x8) 2018/02/26 09:25:21 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000265fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000086a000)=@ethtool_cmd={0x2b}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) [ 63.239999] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/02/26 09:25:21 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000265fd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f000086a000)=@ethtool_cmd={0x2b}}) clone(0x0, &(0x7f0000b26000), &(0x7f0000ea9ffc), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/02/26 09:25:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000aac000)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000000000)=0x58, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x1) dup3(r0, r2, 0x0) 2018/02/26 09:25:21 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 4: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=@ethtool_wolinfo={0x8, 0x0, 0x0, "00000707c89d"}}) 2018/02/26 09:25:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) recvfrom(r1, &(0x7f0000bf5000)=""/228, 0xe4, 0x0, &(0x7f0000cb1ff7)=@rc={0x1f}, 0x9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:21 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 4: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=@ethtool_wolinfo={0x8, 0x0, 0x0, "00000707c89d"}}) 2018/02/26 09:25:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000c1ffc), &(0x7f0000cd3ffc)=0x4) [ 63.313429] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 63.397849] IPv4: Oversized IP packet from 127.0.0.1 2018/02/26 09:25:21 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7ff) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f00009a4000)={{}, 'port1\x00'}) 2018/02/26 09:25:21 executing program 4: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=@ethtool_wolinfo={0x8, 0x0, 0x0, "00000707c89d"}}) 2018/02/26 09:25:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000c6eff6)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write(r0, &(0x7f0000000100)="9b", 0x1) r1 = syz_open_pts(r0, 0x80a80) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) read(r1, &(0x7f0000f23fae)=""/82, 0x52) 2018/02/26 09:25:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000888fff)) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) recvfrom(r1, &(0x7f0000bf5000)=""/228, 0xe4, 0x0, &(0x7f0000cb1ff7)=@rc={0x1f}, 0x9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:21 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f00009a4000)={{}, 'port1\x00'}) 2018/02/26 09:25:21 executing program 4: mmap(&(0x7f0000000000/0xd99000)=nil, 0xd99000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000938000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000938ffb)=@ethtool_wolinfo={0x8, 0x0, 0x0, "00000707c89d"}}) 2018/02/26 09:25:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r1, &(0x7f0000e3d000)=[{&(0x7f0000b7af70)=""/144, 0x90}, {&(0x7f0000760000)=""/187, 0xbb}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 7: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) recvfrom(r1, &(0x7f0000bf5000)=""/228, 0xe4, 0x0, &(0x7f0000cb1ff7)=@rc={0x1f}, 0x9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:21 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f00009a4000)={{}, 'port1\x00'}) 2018/02/26 09:25:21 executing program 7: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 7: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f00009a4000)={{}, 'port1\x00'}) 2018/02/26 09:25:21 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) recvfrom(r1, &(0x7f0000bf5000)=""/228, 0xe4, 0x0, &(0x7f0000cb1ff7)=@rc={0x1f}, 0x9) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) poll(&(0x7f0000df4000)=[{r1}], 0x1, 0x0) 2018/02/26 09:25:21 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 4: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') pread64(r0, &(0x7f0000fd7000)=""/8, 0x398, 0x100000) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 4: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 4: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndtimer(&(0x7f000078b000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndtimer(&(0x7f0000f37000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/02/26 09:25:21 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 4: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x40000000004001) ioprio_get$pid(0x2, 0x0) 2018/02/26 09:25:21 executing program 6: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 7: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet6(0x10, 0x80802, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000001800030007fffd946fa283bc8020000000000006031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/02/26 09:25:21 executing program 4: membarrier(0x0, 0x0) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xa) 2018/02/26 09:25:21 executing program 2: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001dfd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000000140)=[]}}, {{0x0, 0x0, &(0x7f0000000300)=[], 0x2d0, &(0x7f0000000340)=[]}}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000040)="2f0000001800030007fffd946fa283bc8020000000040005031d85680820a3a2d188737e0b0007002cdf1389598e2c", 0x2f}], 0x1}, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '%\x00'}, &(0x7f0000000040)=""/84, 0x54) 2018/02/26 09:25:21 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000)=[], &(0x7f00006fcff0)=[]) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '%\x00'}, &(0x7f0000000040)=""/84, 0x54) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '%\x00'}, &(0x7f0000000040)=""/84, 0x54) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xa) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '%\x00'}, &(0x7f0000000040)=""/84, 0x54) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xa) 2018/02/26 09:25:21 executing program 2: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000001dfd8)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind(r0, &(0x7f0000002000)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @empty}, 0x14) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14, &(0x7f0000000100)=[], 0x0, &(0x7f0000000140)=[]}}, {{0x0, 0x0, &(0x7f0000000300)=[], 0x2d0, &(0x7f0000000340)=[]}}], 0x2, 0x0) 2018/02/26 09:25:21 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000289000)) mq_timedsend(r0, &(0x7f0000012000), 0x0, 0x0, &(0x7f0000036000)) mq_timedreceive(r0, &(0x7f0000610000)=""/81, 0x51, 0x0, 0x0) 2018/02/26 09:25:21 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}}, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000200)=""/82, &(0x7f0000000040)=0x23) 2018/02/26 09:25:21 executing program 7: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f000003e000)={&(0x7f0000025ff8)=[0x0], 0x24}) r0 = syz_open_dev$loop(&(0x7f000003cff5)='/dev/loop#\x00', 0x0, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) ioctl(r0, 0x707, &(0x7f000003e000)) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8953, &(0x7f0000027000)={@generic="020000000006000007cf007506b70001", 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, r1}, 0xc) 2018/02/26 09:25:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xa) 2018/02/26 09:25:21 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000)=[], &(0x7f00006fcff0)=[]) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:25:21 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000)=[], &(0x7f00006fcff0)=[]) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:25:21 executing program 3: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000)=[], &(0x7f00006fcff0)=[]) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/02/26 09:25:21 executing program 1: r0 = socket$inet(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933,